4746 matches found
Adobe Flash Player ActionScript SecurityErrorEvent绕过安全限制漏洞
BUGTRAQ ID: 25260 CVECAN ID: CVE-2007-4324 Flash Player是一款非常流行的FLASH播放器。 Flash Player中的ActionScript 3（AS3）允许远程攻击者通过指定了连接的SWF电影绕过安全沙盒模型获得敏感信息并端口扫描任意主机，然后使用SecurityErrorEvent错误的定时差异判断端口是否开放。 AS3 Adobe引入了新的套接字相关事件SecurityErrorEvent。当Flash Player试图连接到关闭的TCP端口时会立即出现SecurityErrorEvent，如果服务在监听该端口Flash...
Critical: Red Hat Security Advisory: flash-plugin security update
An updated Adobe Flash Player package that fixes a security issue is now available for Red Hat Enterprise Linux 3 Extras, 4 Extras, and 5 Supplementary. This update has been rated as having critical security impact by the Red Hat Security Response Team. The flash-plugin package contains a...
Flash movie can determine whether a TCP port is open
ActionScript 3 AS3 in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash SWF movie that specifies a connection to make, then...
LDAP Client Anonymous Bind Connection
Binary data 4316.prm...
SuSE 10 Security Update : kdelibs3 (ZYPP Patch Number 3053)
A bug in KHTML could be exploited to conduct cross site scripting XSS attacks. CVE-2007-0537 Another bug allowed attackers to abuse the FTP passive mode for portscans. CVE-2007-1564 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...
AIX 530005 : U810424
The remote host is missing AIX PTF U810424 which is related to the security of the package X11.Dt.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...
Bypassing Anti-Rookit kernel modules scanning techniques-vulnerability warning-the black bar safety net
This article describes some of the methods, you can bypass the current mainstream of the modernAnti-rootkittools, including, but not limited to:Icesword latest version, Gmer latest version, Rootkit unhooker latest version, DarkSpy latest edition and AVG Anti-rootkit latest version, etc. The curre...
CVE-2004-2703
Clearswift MIMEsweeper 5.0.5, when it has been upgraded from MAILsweeper for SMTP version 4.3 or MAILsweeper Business Suite I or II, allows remote attackers to bypass scanning by including encrypted data in a mail message, which causes the message to be marked as "Clean" instead of "Encrypted"...
CVE-2004-2703
The CVE-2004-2703 entry concerns Clearswift MIMEsweeper 5.0.5, upgraded from MAILsweeper SMTP versions, where remote data that is encrypted within a mail message can bypass scanning and be marked as Clean rather than Encrypted. This describes the affected product/function (MIMEsweeper 5.0.5 after...
CVE-2007-5143
F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted 1 archive or 2 packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to...
Cross site scripting
F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted 1 archive or 2 packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to...
F-Secure Anti-Virus for Windows system32 Directory Crafted File Detection Bypass
The remote host is running F-Secure Anti-Virus for Windows Servers. According to its version, the installation of this software on the remote host may allow an attacker by bypass antivirus scanning by placing a specially crafted archive or packed executable into the 'system32' folder. Note that...
SOL7983 - ClamAV NULL dereference vulnerability - CVE-2007-4510
The FirePass controller can be configured to provide anti-virus scanning of files uploaded through Portal Access through the ClamAV open source software. Scanning is configured on the Antivirus tab of the Portal Access Content Inspection page, through the Enable Standalone virus Scanner option...
SOL7985 - ClamAV clamav-milter vulnerability - CVE-2007-4560
The FirePass controller can be configured to provide anti-virus scanning of files uploaded through Portal Access through the ClamAV open source software. Scanning is configured on the Antivirus tab of the Portal Access: Content Inspection page, through the Enable Standalone virus Scanner option...
ClamAV: Multiple vulnerabilities
Background Clam AntiVirus is an open source GPL anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Nikolaos Rangos discovered a vulnerability in ClamAV which exists because the recipient address extracted from email messages is not properly sanitize...
Preemptive Protection against ClamAV Mail Filter Extension Code Execution Vulnerability
A code execution vulnerability has been reported in ClamAV AntiVirus product. Clam AntiVirus is an open source anti-virus toolkit that provides e-mail scanning on mail gateways. A remote attacker could exploit this issue to execute commands on an affected system...
Sophos Anti-Virus CAB, RAR and LZH Scanning Evasion
The version of Sophos Anti-Virus installed on the remote host reportedly contains several problems involving the processing of 'CAB' 'RAR' and 'LZH' files which may allow an attacker to evade the anti- virus scanning by sending a specially-malformed archive. In addition, an attacker may exploit a...
[SECURITY] Fedora Core 6 Update: kdegraphics-3.5.7-1.fc6.1
Graphics applications for the K Desktop Environment. Includes: kdvi displays TeX .dvi files kghostview displays postscript files kcoloredit palette editor and color chooser kiconedit icon editor kolourpaint a simple drawing program ksnapshot screen capture utility kview image viewer for GIF, JPEG...
Hack explore lake2 conjecture Serv-U the bounce attack and use-vulnerability and early warning-the black bar safety net
The FTP bounce attack the FTP Bounce Attack is a very old technology, actually in our information security educational materials on find description, its indeed the age is. The so-called FTP bounce attack is to use the FTP Protocol PORT command to send the data to a third party, so you can use...