Multiple personal firewall protection bypass

By using scripting and crossite scripting malware script can bypass protection against access to external sites and bypass sites restriction...

Outblaze Webmail - HTML Injection

source: https://www.securityfocus.com/bid/10756/info Outblaze Webmail is reported prone to an-HTML injection vulnerability because the application fails to properly sanitize user-supplied HTML email content. An attacker may be able to inject HTML and script code into the application through HTML...

RHEL 3 : kdepim (RHSA-2004:005)

Updated kdepim packages are now available that fix a local buffer overflow vulnerability. The K Desktop Environment KDE is a graphical desktop for the X Window System. The KDE Personal Information Management kdepim suite helps you to organize your mail, tasks, appointments, and contacts. The KDE...

BasiliX Webmail 1.1 - Email Header HTML Injection

source: https://www.securityfocus.com/bid/10662/info BasiliX Webmail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker can exploit this issue to gain acces...

Sygate Personal Firewall Pro 5.5 - Local Denial of Service

Sygate Personal Firewall Pro 5.5 - Local Denial of Service source: https://www.securityfocus.com/bid/10542/info A local denial of service vulnerability is reported to affect the Sygate Personal Firewall. It is reported that the smc.exe service may be crashed using the List-View Control in the...

Sygate Personal Firewall Pro 5.5 - Local Fail-Close Bypass

Sygate Personal Firewall Pro 5.5 - Local Fail-Close Bypass source: https://www.securityfocus.com/bid/10540/info A vulnerability is reported to affect the Sygate Personal Firewall fail-closed functionality. It is reported that the kernel-space NDIS driver does not verify the origin of messages tha...

Sygate Personal Firewall Pro 5.5 - Local Denial of Service

source: https://www.securityfocus.com/bid/10542/info A local denial of service vulnerability is reported to affect the Sygate Personal Firewall. It is reported that the smc.exe service may be crashed using the List-View Control in the Sygate Personal Firewall GUI. This issue may be exploited in...

Sygate Personal Firewall Pro 5.5 - Local Fail-Close Bypass

source: https://www.securityfocus.com/bid/10540/info A vulnerability is reported to affect the Sygate Personal Firewall fail-closed functionality. It is reported that the kernel-space NDIS driver does not verify the origin of messages that are received through the associated device. As a result o...

SquirrelMail 1.x - Email Header HTML Injection

source: https://www.securityfocus.com/bid/10439/info SquirrelMail is reported to be prone to an email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email header strings. An attacker can exploit this issue to gain access t...

CVE-2004-0445

The CVE-2004-0445 issue affects Symantec Symantec Norton Internet Security/Professional (2002–2004), Norton Personal Firewall (2002–2004), Norton AntiSpam 2004, and corporate products Client Firewall 5.01/5.1.1 and Client Security 1.0–2.0, via the SYMDNS.SYS DNS/NBNS processing driver. A speciall...

CVE-2004-0444: Undefined Security Weakness

Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of servic...

CVE-2004-0375: Undefined Security Weakness

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

Symantec personal firewalls DoS

TCP packets with some options of zero langth causes system to hang...

Kerio Personal Firewall 4 and IE 6 "Bug"

---------------- Kerio Personal Firewall 4 - ---------------- +Web Filtering enabled problem If a URL contains  131213 Kerio Firewall Crashes http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=&btnG=Google +Search also it can be passed to a browser via IFRAME tag and crash Kerio without...

Kerio Personal Firewall 4.0.x - Web Filtering Remote Denial of Service

Kerio Personal Firewall 4.0.x - Web Filtering Remote Denial of Service source: https://www.securityfocus.com/bid/10075/info Kerio Personal Firewall includes Web URI Filtering functionality. A denial of service vulnerability has been reported to affect Kerio Personal Firewall when Web Filtering...

Kerio Personal Firewall DoS

Special characters in URL cause service to crash...

Kerio Personal Firewall 4.0.x - Web Filtering Remote Denial of Service

source: https://www.securityfocus.com/bid/10075/info Kerio Personal Firewall includes Web URI Filtering functionality. A denial of service vulnerability has been reported to affect Kerio Personal Firewall when Web Filtering functionality is enabled. The issue presents itself when Web Filtering...

KDE Personal Information Management Suite Remote Buffer Overflow Vulnerability

Background KDE-PIM is an application suite designed to manage mail, addresses, appointments, and contacts. Description A buffer overflow may occur in KDE-PIM's VCF file reader when a maliciously crafted VCF file is opened by a user on a vulnerable system. Impact A remote attacker may unauthorized...

CVE-2004-0248

CVE-2004-0248 describes a cross-site scripting (XSS) vulnerability in PHPX 3.2.3. The issue allows remote attackers to run arbitrary script as another user by injecting HTML or script into three inputs: the keywords argument of main.inc.php, the body argument of help.inc.php, or the subject field...

CVE-2004-0272

CVE-2004-0272 describes an SQL injection vulnerability in MaxWebPortal that allows remote attackers to inject arbitrary SQL via the SendTo parameter in Personal Messages, potentially exposing sensitive information. The NVD reports a CVSS v2 base score of 7.5 (HIGH) with network access, low attack...