SUSE-SA:2005:038: clamav

The remote host is missing the patch for the advisory SUSE-SA:2005:038 clamav. This security update upgrades the Clamav virus scan engine to the version 0.68.1. Among other bugfixes and improvements, this update fixes a bug in the Quantum decompressor routines that can be used for a remote denial...

CVE-2002-2071

Compaq Tru64 4.0 d allows remote attackers to cause a denial of service in 1 telnet, 2 FTP, 3 ypbind, 4 rpc.lockd, 5 snmp, 6 ttdbserverd, and possibly other services via a TCP SYN scan, as demonstrated using nmap...

CVE-2002-2071

CVE-2002-2071 affects Compaq Tru64 4.0d and allows remote denial of service against multiple services (telnet, FTP, ypbind, rpc.lockd, snmp, ttdbserverd, and possibly others) via a TCP SYN scan (e.g., using nmap). The available records describe the vulnerability as a DoS condition triggered by pa...

FreeBSD : wget -- multiple vulnerabilities (06f142ff-4df3-11d9-a9e7-0001020eed82)

Jan Minar reports that there exists multiple vulnerabilities in wget : Wget erroneously thinks that the current directory is a fair game, and will happily write in any file in and below it. Malicious HTTP response or malicious HTML file can redirect wget to a file that is vital to the system, and...

CVE-2002-1944

The vulnerability CVE-2002-1944 affects the Motorola Surfboard 4200 cable modem, where remote attackers can trigger a denial-of-service (crash) by sending a SYN scan with a tool like nmap. The available documents describe the affected device and the attack vector (network-based SYN scan) and resu...

CVE-2002-1944

Motorola Surfboard 4200 cable modem allows remote attackers to cause a denial of service crash by performing a SYN scan using a tool such as nmap...

CVE-2002-1778

CVE-2002-1778 affects Symantec Norton Personal Firewall 2002. The vulnerability allows remote attackers to bypass the portscan protection by using crafted scans: SYN/FIN, SYN/FIN/URG, SYN/FIN/PUSH, or SYN/FIN/URG/PUSH. The connected records reiterate this bypass but do not provide the exact root ...

CVE-2000-1226

Snort 1.6, when running in straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging selected, allows remote attackers to cause a denial of service crash by sending non-IP protocols that Snort does not know about, as demonstrated by an nmap protocol scan...

CVE-2002-1775

Affected product: Symantec Norton AntiVirus (NAV) 2002. Issue: remote attackers can bypass the initial virus scan by using a non-RFC compliant MIME header, causing NAV to prematurely stop scanning. Root cause/impact: bypass of initial scan with partial impact on security posture; AutoProtect feat...

CVE-2000-1226

Removed by vendor...

CVE-2000-1226

Snort 1.6 is affected. In straight ASCII packet logging mode or IDS mode with straight decoded ASCII packet logging, remote attackers can cause a denial of service (crash) by sending non-IP protocols that Snort cannot recognize, as demonstrated by an nmap protocol scan. This vulnerability is docu...

CVE-2005-1711

Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected...

CVE-2005-1711

Gibraltar Firewall 2.2 and earlier, when using the ClamAV update to 0.81 for Squid, uses a defunct ClamAV method to scan memory for viruses, which does not return an error code and prevents viruses from being detected...

SSH Sentinel 1.1 VPN Detection

Binary data 2927.prm...

Xerox WorkCentre Multi-Page Document Scan/Fax Information Disclosure (XRX05-002)

According to its model number and software version, the remote host is a Xerox WorkCentre device that may, under rare conditions, send a fax or scan to a different addressee than intended. This occurs only when faxing not copying a multi-page document and a power failure occurs while scanning the...

CVE-2004-1947

The AVXSCANONLINE.AvxScanOnlineCtrl.1 ActiveX control in BitDefender Scan Online allows remote attackers to 1 obtain sensitive information such as system drives and contents or 2 use the RequestFile method to download and execute arbitrary code via an object codebase that uses bitdefender.cab...

CVE-2004-1977

3com NBX IP VOIP NetSet Configuration Manager allows remote attackers to cause a denial of service crash via a Nessus scan in safeChecks mode...

CVE-2005-0643

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files...

CVE-2005-0922

Unknown vulnerability in the Auto-Protect module in Symantec Norton AntiVirus 2004 and 2005, as also used in Internet Security 2004/2005 and System Works 2004/2005, allows attackers to cause a denial of service system hang or crash by triggering a scan of a certain file type...

CVE-2005-0644

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643...