CVE-2007-3771: Undefined Security Weakness

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service service crash via a long 1 To, 2 From, or 3 Subject header in an outbound SMTP e-mail messag...

IBM Spectrum Protect / Tivoli Storage Manager Service Detection

The remote host is running IBM Spectrum Protect, formerly known as Tivoli Storage Manager, a backup and data protection server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25656; scriptversion"1.14"; scriptsetattributeattribute:"pluginmodificationdate",...

CVE-2006-3456

The Symantec NAVOPTS.DLL ActiveX control aka Symantec.Norton.AntiVirus.NAVOptions 12.2.0.13, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, is designed for use only in application-embedded web browsers, which allows remote attackers to "crash the control" via...

Trend Micro Server Protect unauthorized access

Unauthorized TCP/14942 Web interface access...

CVE-2006-6458: Undefined Security Weakness

The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service CPU consumption and system hang via a malformed RAR...

cpanel10-xss.txt

Aria-Security Team Advisory Original Advisory : http://aria-security.net/advisory/cpanel.txt ----------------------------------------------------------- Software: CPanel Tested On CPanel 10 CPanel file Manager: PoC: http://target.com:2082/frontend/Servername/files/seldir.html?dir=XSS CPanel...

BadBlue invalid GET DoS

It was possible to kill the web server by sending an invalid GET request without any URI SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

HTTP header overflow

It was possible to kill the web server by sending an invalid request with a too long header name or value. A cracker may exploit this vulnerability to make your web server crash continually or even execute arbirtray code on your system. OpenVAS Vulnerability Test $Id: wwwtoolongheader.nasl 8023...

CVE-2005-2879: Undefined Security Weakness

Advansysperu Software USB Lock Auto-Protect AP 1.5 uses a weak encryption scheme to encrypt passwords, which allows local users to gain sensitive information and bypass USB interface protection...

CVE-2005-0923

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service CPU consumption and system crash by renaming a file on a network share...

CVE-2005-0922

Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service system hang or crash by triggering a scan of a certain file type...

Symantec Norton AntiVirus vulnerable to DoS via the "Auto-Protect" module

Overview Symantec Norton AntiVirus may hang or crash when the Auto-Protect module scans certain files. Description Symantec Norton AntiVirus is an anti-virus product for desktop and enterprise use. The Norton AntiVirus "Auto-Protect" module provides automatic file scanning and detection of viruse...

CVE-2005-0922

CVE-2005-0922 affects Symantec Norton AntiVirus 2004/2005 (also used in Internet Security 2004/2005 and System Works 2004/2005). The Auto-Protect real-time scanning module can be triggered by certain file types to cause a denial of service, potentially hanging or crashing the system. The vulnerab...

CVE-2005-0923: Undefined Security Weakness

The SmartScan feature in the Auto-Protect module for Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service CPU consumption and system crash by renaming a file on a network share...

CVE-2005-0922: Undefined Security Weakness

Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service system hang or crash by triggering a scan of a certain file type...

CVE-2004-1647

SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via 1 admin or Pass parameter to indexnext.asp, 2 LoginId, OPass, or NPass to CPassChangePassword.asp, 3 usersedit.asp, or 4 usersadd.asp...

CVE-2004-1648

Cross-site scripting XSS vulnerability in 1 index.asp, 2 ChangePassword.asp, 3 userslist.asp, 4 and usersadd.asp in Password Protect allows remote attackers to inject arbitrary web script or HTML via the ShowMsg parameter...

CVE-2004-1647

Password Protect is vulnerable to SQL injection in multiple entry points. The CVE describes bypassing authentication and arbitrary SQL execution via parameters in ASP pages: (1) index_next.asp with admin/Pass, (2) CPassChangePassword.asp with LoginId, OPass, or NPass, (3) users_edit.asp, and (4) ...

CVE-2004-1648

CVE-2004-1648 is a cross-site scripting (XSS) vulnerability in Password Protect affecting multiple ASP pages (index.asp, ChangePassword.asp, users_list.asp, users_add.asp) via the ShowMsg parameter. The issue is documented across CVE entries (NVD, CVE List) with a MEDIUM severity (CVSS v2 base sc...

CVE-2004-1647: Undefined Security Weakness

SQL injection vulnerability in Password Protect allows remote attackers to execute arbitrary SQL statements and bypass authentication via 1 admin or Pass parameter to indexnext.asp, 2 LoginId, OPass, or NPass to CPassChangePassword.asp, 3 usersedit.asp, or 4 usersadd.asp...