[Full-disclosure] Multiple Vulnerabilities of PY Software Active Webcam WebServer

Multiple Vulnerabilities of PY Software Active Webcam WebServer By Sowhat 04.Jan.2005 http://secway.org/advisory/ad20050104.txt Product: PY Software Active Webcam 5.5 Vendor: PY Software, Inc. 1 Introduction Active WebCam is a popular shareware program for capturing video streams from video devic...

CVE-2004-1038

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: th...

CVE-2004-1038

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: th...

CVE-2005-0078

The KDE screen saver in KDE before 3.0.5 does not properly check the return value from a certain function call, which allows attackers with physical access to cause a crash and access the desktop session...

CVE-2005-0078

CVE-2005-0078 affects KDE screensaver (kscreensaver) prior to KDE 3.0.5. The issue stems from not properly checking the return value of a function call, enabling a local attacker with physical access to cause a crash and potentially take over a locked desktop session. Public sources note upstream...

[SECURITY] [DSA 660-1] New kdebase packages fix authentication bypass

-------------------------------------------------------------------------- Debian Security Advisory DSA 660-1 [email protected] http://www.debian.org/security/ Martin Schulze January 26th, 2005 http://www.debian.org/security/faq -...

CVE-2004-1193

Prevx Home 1.0 allows local users with administrator privileges to bypass the intrusion prevention features by directly writing to \device\physicalmemory, which restores the running kernel's original SDT ServiceTable...

F-Secure Policy Manager Path Disclosure

The remote host is running F-Secure Policy Manager, a distributed administration software allowing a system administrator to control applications from a single web console. There is a flaw in the file '/fsms/fsmsh.dll' that discloses the physical path this application is under. An attacker could...

Linux Kernel 2.4.x/2.6.x - Local Denial of Service / Memory Disclosure

source: https://www.securityfocus.com/bid/11754/info The Linux kernel is reported prone to multiple local vulnerabilities: - A handcrafted 'a.out' file may be used to trigger a local denial-of-service condition. A local attacker may exploit this vulnerability to trigger a system-wide denial of...

PrevX protection bypass

Protection can be bypassed by direct physical memory access...

CVE-2004-1038

A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: th...

CVE-2004-1038

CVE-2004-1038 describes a design error in the IEEE1394 (FireWire) specification that can allow attackers with physical access to read/write sensitive memory via a modified FireWire client, bypassing intended access restrictions. The issue is a local vulnerability in the FireWire stack that could ...

EEYE: Kerio Personal Firewall Multiple IP Options Denial of Service

Kerio Personal Firewall Multiple IP Options Denial of Service Release Date: November 9, 2004 Date Reported: October 30, 2004 Severity: High Remote Denial of Service Vendor: Kerio Systems Affected: Kerio Personal Firewall 4.1.1 and prior Overview: eEye Digital Security has discovered a severe deni...

xtrlock -- X display locking bypass

The X display locking program xtrlock contains an integer overflow bug. It is possible for an attacker with physical access to the system to bypass the display lock...

CVE-2002-0673

The enrollment process for Pingtel xpressa SIP-based voice-over-IP phone 1.2.5 through 1.2.7.4 allows attackers with physical access to the phone to log out the current user and re-register the phone using MyPingtel Sign-In to gain remote access and perform unauthorized actions...

CVE-1999-1397

Index Server 2.0 on IIS 4.0 stores physical path information in the ContentIndex\Catalogs subkey of the AllowedPaths registry key, whose permissions allows local and remote users to obtain the physical paths of directories that are being indexed...

CVE-2004-0622

Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login aka Loginwindow.app, Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory...

CVE-2004-0109

Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry...

Multible Vulnerabilites in Aldos Webserver

Multible Vulnerabilites in Aldos Webserver ========================================== Aldo's Web Server is a super-compact Web service daemon that not only let you share easily your files, it also acts as a Advertisment or site blocker. Version: ======== 1.5 on Windows Platform Vulnerabilities:...

aldosweb.txt

Multible Vulnerabilites in Aldos Webserver ========================================== Aldo's Web Server is a super-compact Web service daemon that not only let you share easily your files, it also acts as a Advertisment or site blocker. Version: ======== 1.5 on Windows Platform Vulnerabilities:...