CVE-2004-2088

Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification DSN where the original email is not included in the bounce message...

CVE-2004-2088: Undefined Security Weakness

Sophos Anti-Virus 3.78 allows remote attackers to bypass virus scanning by using a qmail generated Delivery Status Notification DSN where the original email is not included in the bounce message...

myServer Multiple Vulnerabilities

Binary data 2892.prm...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

Symantec Norton AntiVirus vulnerable to DoS via the "Auto-Protect" module

Overview Symantec Norton AntiVirus may hang or crash when the Auto-Protect module scans certain files. Description Symantec Norton AntiVirus is an anti-virus product for desktop and enterprise use. The Norton AntiVirus "Auto-Protect" module provides automatic file scanning and detection of viruse...

Kayako eSupport Multiple XSS

Binary data 2621.prm...

GLSA-200501-46 : ClamAV: Multiple issues

The remote host is affected by the vulnerability described in GLSA-200501-46 ClamAV: Multiple issues ClamAV fails to properly scan ZIP files with special headers CAN-2005-0133 and base64 encoded images in URLs. Impact : By sending a base64 encoded image file in a URL an attacker could evade virus...

SYM05-003 Symantec UPX Parsing Engine Heap Overflow

Symantec Security Advisory SYM05-003 08 February, 2005 Symantec UPX Parsing Engine Heap Overflow Revision History 2/9/2005 - Updated Vulnerability details and mitigations. Updated CVE Candidate Number 2/11/2005 - Configuration modifications tested and added to disable vulnerable module in SAVCE a...

[SA14216] F-Secure Multiple Products ARJ Archive Handling Vulnerability

TITLE: F-Secure Multiple Products ARJ Archive Handling Vulnerability SECUNIA ADVISORY ID: SA14216 VERIFY ADVISORY: http://secunia.com/advisories/14216/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: F-Secure Anti-Virus 2004 http://secunia.com/product/3500/ F-Secure...

Generic Email Client Detection

Binary data 2611.prm...

CVE-2005-0315

The CVE-2005-0315 entry concerns the FTP service in Magic Winmail Server 4.0 Build 1112, where the FTP PORT command does not verify that the command IP matches the FTP session user’s IP. This permits remote authenticated users to use the server as an intermediary for port scanning. The connected ...

CVE-2005-0315

The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning...

CVE-2005-0315: Undefined Security Weakness

The FTP service in Magic Winmail Server 4.0 Build 1112 does not verify that the IP address in a PORT command is the same as the IP address of the user of the FTP session, which allows remote authenticated users to use the server as an intermediary for port scanning...

CVE-2005-0218

CVE-2005-0218 : ClamAV versions up to 0.80 are vulnerable. A remote attacker can bypass virus scanning by embedding a base64-encoded image in a data: URL, allowing malicious content to pass checks. The issue is documented across multiple advisories, indicating a vulnerability in the data: URL han...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0218

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

CVE-2005-0218: Undefined Security Weakness

ClamAV 0.80 and earlier allows remote attackers to bypass virus scanning via a base64 encoded image in a data: RFC 2397 URL...

Mandrake Linux Security Advisory : clamav (MDKSA-2005:025)

Two problems were discovered in versions of clamav prior to 0.81. An attacker could evade virus scanning by sending a base64-encoded imaege file in a URL. Also, by sending a specially crafted ZIP file, an attacker could cause a DoS Denial of Service by crashing the clamd daemon. %NASLMINLEVEL 703...