[PT-2009-05] CA Internet Security Suite Denial of Service Vulnerability

---------------------------------------------------------------------- PT-2009-05 Positive Technologies Security Advisory CA Internet Security Suite Denial of Service Vulnerability ---------------------------------------------------------------------- --- Affected Software CA Internet Security...

[PT-2008-09] Microsoft Windows MSMQ Privilege Escalation Vulnerability

---------------------------------------------------------------------- PT-2008-09 Positive Technologies Security Advisory Microsoft Windows MSMQ Privilege Escalation Vulnerability ---------------------------------------------------------------------- --- Affected Software Microsoft Windows 2000...

[Positive Technologies SA 2009-01] PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

---------------------------------------------------------------------- PT-2009-01 Positive Technologies Security Advisory PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software PGP Desktop 9.9.0...

[Positive Technologies SA 2009-09] Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities

---------------------------------------------------------------------- PT-2009-09 Positive Technologies Security Advisory Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities ---------------------------------------------------------------------- --- Affected...

Ken "Skywing" Johnson joins Microsoft security team

Microsoft has hired yet another well-known security researcher to join its ever-growing team of exploit and defense experts. This time it’s Ken Johnson, known in the hacker world as Skywing. Johnson is known as an expert on debugging and reverse engineering, and has done a tremendous amount of wo...

[Suspected Spam][PT-2009-11] SlySoft Multiple Products ElbyCDIO.sys Denial of Service

---------------------------------------------------------------------- PT-2009-11 Positive Technologies Security Advisory SlySoft Multiple Products ElbyCDIO.sys Denial of Service ---------------------------------------------------------------------- --- Affected Software SlySoft AnyDVD version...

[Positive Technologies SA:2009-20] A.CMS Multiple Vulnerabilities

---------------------------------------------------------------------- PT-2009-20 Positive Technologies Security Advisory A.CMS Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software A.CMS Versions 1.x prior to 1.23 Product Link:...

[Positive Technologies SA:2009-13] TinX CMS 3.x SQL Injection Vulnerability

---------------------------------------------------------------------- PT-2009-13 Positive Technologies Security Advisory TinX CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software TinX CMS Versions 3.x prior to 3.5.1 Product...

TinX CMS SQL Injection

---------------------------------------------------------------------- PT-2009-13 Positive Technologies Security Advisory TinX CMS SQL Injection vulnerability ---------------------------------------------------------------------- --- Affected Software TinX CMS Versions 3.x prior to 3.5.1 Product...

PT-2009-05: CA Internet Security Suite Denial of Service Vulnerability

Positive Technologies Research Team has discovered a denial of service DoS vulnerability in CA Internet Security Suite. The IOCTL handler in vetmonnt.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Solution Install latest...

PT-2009-44: Multiple vulnerabilities in Kayako Support Suite

Kayako Support Suite is a HelpDesk system. Vulnerability Description Positive Technologies Research Team discovered Local File Inclusion LFI vulnerabilities in Kayako Support Suite. A vulnerable function unset allows attackers to overwrite an arbitrary global and not overridden variable, which ca...

PT-2009-24: ELDORADO CMS Multiple Vulnerabilities

ELDORADO CMS is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

PT-2009-41: Multiple vulnerabilities in Kayako Support Suite

Vulnerability Description Positive Technologies Research Team discovered several Installation Path Disclosure vulnerabilities in Kayako Support Suite. The application uses a vulnerable PHP function unserialize, which allows an attacker to disclose the product installation path. In addition, there...

PT-2009-40: JIRA sensitive information disclosure

JIRA lets you prioritise, assign, track, report and audit your 'issues,' whatever they may be — from software bugs and help-desk tickets to project tasks and change requests. Vulnerability Description Positive Technologies Research Team has discovered a sensitive information disclosure...

PT-2009-09: Trend Micro Internet Security Pro 2009 tmactmon.sys Priviliege Escalation Vulnerabilities

Vulnerability Description Positive Technologies Research Team has discovered multiple priviliege escalation vulnerabilities in Trend Micro products. The IOCTL handler in tmactmon.sys uses the METHODNEITHER communication method for IOCTLs and does not properly validate buffer data associated with...

PT-2009-01: PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

Positive Technologies Research Team has discovered several vulnerabilities in PGP Desktop. 1. The IOCTL handler in pgpdisk.sys does not properly validate buffer data associated with the Irp object, which allows local users to crash the system. Severity Rating : Severity: Medium Impact: Denial of...

PT-2009-11: SlySoft Multiple Products ElbyCDIO.sys Denial of Service

Vulnerability Description Positive Technologies Research Team has discovered multiple memory corruption vulnerabilities in SlySoft products. The IOCTL handler in ElbyCDIO.sys 6.0.2.0 and earlier, shipped with AnyDVD, Virtual CloneDrive, CloneDVD and CloneCD, uses the METHODNEITHER communication...

PT-2009-22: EXcms Root directory disclosure vulnerability

EXcms is a content management system CMS software, usually implemented as a Web application, for creating and managing HTML content. It is used to manage and control a large, dynamic collection of Web material HTML documents and their associated images. Vulnerability Description Positive...

Dovecot ACL Plugin Security Bypass Vulnerabilities

Dovecot ACL Plugin is prone to multiple security bypass vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2008-4447

Cross-site scripting XSS vulnerability in actions.php in Positive Software H-Sphere WebShell 4.3.10 allows remote attackers to inject arbitrary web script or HTML via 1 the fn parameter during a dload action, 2 the mask parameter during a search action, and 3 the tab parameter during a sysinfo...