242 matches found
CVE-2008-3174
Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System HIPS r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."...
CVE-2008-2926
The kmxfw.sys driver in CA Host-Based Intrusion Prevention System HIPS r8, as used in CA Internet Security Suite and Personal Firewall, does not properly verify IOCTL requests, which allows local users to cause a denial of service system crash or possibly gain privileges via a crafted request...
CA Host-Based Intrusion Prevention System Server Default Credentials
The remote host is running Computer Associates' Host-Based Intrusion Prevention System CA HIPS Server, an intrusion prevention system for Windows. The remote installation of CA HIPS Server is configured to use default credentials to control access. Knowing these, an attacker can gain control of t...
CA Host-Based Intrusion Prevention System Server Log Data XSS
The remote host is running Computer Associates' Host-Based Intrusion Prevention System CA HIPS Server, an intrusion prevention system for Windows. The version of CA HIPS Server installed on the remote Windows server is reportedly affected by a cross-site scripting issue because it fails to saniti...
CVE-2007-5472
Cross-site scripting XSS vulnerability in the Server component in CA Host-Based Intrusion Prevention System HIPS before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer...
CA Host-Based Intrusion Prevention System crossite scripting
Crossite scripting with log files...
[REVS] Having Fun with Sensor Appliance Proventia GX5108 and GX5008 Insecurities (Part One)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Design/Logic Flaw
The ATOMIC.TCP signature engine in the Intrusion Prevention System IPS feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allows remote attackers to cause a denial of service IPS crash and traffic loss via unspecified manipulations that are not properly handled by the regular expressio...
CVE-2007-0917
The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...
CVE-2007-0917
The Intrusion Prevention System IPS feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regular expressions via fragmented packets...
Cisco Security Advisory: Multiple IOS IPS Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple IOS IPS Vulnerabilities Advisory ID: cisco-sa-20070213-iosips http://www.cisco.com/warp/public/707/cisco-sa-20070213-iosips.shtml Revision 1.0 For Public Release 2007 February 13 1600 UTC GMT -...
Multiple IOS IPS Vulnerabilities
The Intrusion Prevention System IPS feature set of Cisco IOS® contains several vulnerabilities. These include: Fragmented IP packets may be used to evade signature inspection. IPS signatures utilizing the regular expression feature of the ATOMIC.TCP signature engine may cause a router to crash...
Cisco Intrusion Prevention System administration interface fails to properly handle Secure Socket Layer packets
Overview The web administration interface of Cisco Intrusion Prevention System and Intrusion Detection System devices fails to properly handle certain Secure Socket Layer packets. This vulnerability may cause a denial of service. Description According to Cisco Security Advisory...
Cisco Intrusion Prevention System Scanning Bypass Vulnerability
Cisco Intrusion Prevention System versions prior to 5.12 contain a vulnerability that could allow an unauthenticated, remote attacker to bypass security scanning. This vulnerability is due to a failure to properly handle fragmented packets. An unauthenticated, remote attacker can exploit this...
To bypass the buffer overflow protection system-vulnerability warning-the black bar safety net
1-Introduction Recently a period of time,some of the commercial security agencies begin to propose some solutions to solve the buffer overflow problem. This article analyzes these protection schemes,and introduce some techniques to bypass the buffer overflow protection system. Now quite a few...
CVE-2006-0362
TippingPoint Intrusion Prevention System IPS TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service CPU consumption via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header...
CVE-2006-0362
TippingPoint Intrusion Prevention System IPS TOS before 2.1.4.6324, and TOS 2.2.x before 2.2.1.6506, allow remote attackers to cause a denial of service CPU consumption via an unknown vector, probably involving an HTTP request with a negative number in the Content-Length header...
Cisco Intrusion Prevention System Vulnerable to Privilege Escalation
...
Cisco Security Advisory: Cisco Intrusion Prevention System Vulnerable to Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ========================================================================= Cisco Security Advisory: Cisco Intrusion Prevention System Vulnerable to Privilege Escalation Revision 1.0 For Public Release 2005 August 22 1700 UTC GMT...