CVE-2008-2468

CVE-2008-2468 affects LANDesk Management Suite through the QIP Server Service (qipsrvr.exe). A heap/stack buffer overflow in processing specially crafted heal requests (via MultiByteToWideChar) targets the StringToMap and StringSize arguments, allowing remote code execution with SYSTEM privileges...

ZoneAlarm Security Suite反病毒目录路径缓冲区溢出漏洞

BUGTRAQ ID: 31124 CNCAN ID：CNCAN-2008091206 ZoneAlarm Security Suite保护电脑免受黑客，病毒， 蠕虫病毒，木马，系统漏洞等的危害的安全套件。 ZoneAlarm Security Suite反病毒组件不能解析超长路径，远程攻击者可以利用漏洞触发缓冲区溢出，可能导致系统不受反病毒保护，或任意代码执行。 构建超长路径的恶意文件包，提交给ZoneAlarm Security Suite反病毒组件可触发此漏洞。 Zone Labs ZoneAlarm Internet Security Suite 7.0 目前没有解决方案提供:...

ZoneAlarm Security Suite buffer overflow

Buffer overflow on oversized path to file being scanned...

ZoneAlarm Security Suite buffer overflow

Application: ZoneAlarm Security Suite OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The zonealarm is a known firewall, which in the versio...

ZoneAlarm Security Suite 7.0 - AntiVirus Directory Path Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/31124/info ZoneAlarm Security Suite is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input when performing virus scans on long directory paths. Remote attackers may leverage thi...

ZoneAlarm Security Suite 7.0 - AntiVirus Directory Path Buffer Overflow (PoC)

ZoneAlarm Security Suite 7.0 - AntiVirus Directory Path Buffer Overflow PoC source: https://www.securityfocus.com/bid/31124/info ZoneAlarm Security Suite is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input when...

CA kmxfw.sys Code Execution and DoS Vulnerabilities

This host is running CA Products, which is prone to Local Code Execution and Denial of Service Vulnerabilities. OpenVAS Vulnerability Test $Id: secpodcaprdtsmultvuln900202.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: CA kmxfw.sys Code Execution and DoS Vulnerabilities. Authors: Veerendra GG...

Design/Logic Flaw

Unspecified vulnerability in the kmxfw.sys driver in CA Host-Based Intrusion Prevention System HIPS r8, as used in CA Internet Security Suite and Personal Firewall, allows remote attackers to cause a denial of service via unknown vectors, related to "insufficient validation."...

Outpost Security Suite Pro ver. 2009 Multiple vulnerabilities

Application: Outpost Security Suite Pro ver. 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description Outpost Security Suite is a software...

oss-bypass.txt

Application: Outpost Security Suite Pro ver. 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description Outpost Security Suite is a software...

Outpost Security Suite Pro文件名解析安全绕过漏洞

BUGTRAQ ID: 30347 CNCAN ID：CNCAN-2008072305 Outpost Security Suite Pro是一款集合反病毒和反木马功能的专业防火墙安全套装。 Outpost Security Suite Pro处理文件名存在问题，远程攻击者可以利用漏洞绕过扫描，导致恶意程序在系统上信任执行。 特殊字符构建的文件名可绕过病毒保护，导致恶意文件不被检测到，另外使用特殊的字符构建文件名，可导致运行时不被防火墙阻止。 Outpost Security Suite Pro 目前没有解决方案提供：...

Outpost Security Suite Pro 2009 - Filename Parsing Security Bypass

Outpost Security Suite Pro 2009 - Filename Parsing Security Bypass source: https://www.securityfocus.com/bid/30347/info Outpost Security Suite Pro is prone to a vulnerability that allows an unauthorized attacker to bypass antivirus and firewall rules. This issue occurs because the application fai...

Outpost Security Suite Pro 2009 - Filename Parsing Security Bypass

source: https://www.securityfocus.com/bid/30347/info Outpost Security Suite Pro is prone to a vulnerability that allows an unauthorized attacker to bypass antivirus and firewall rules. This issue occurs because the application fails to adequately sanitize user-supplied input. Successful exploits...

Directory traversal

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 aka UmxEventCliLib ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. dot dot in the argument to the SaveToFile method. NOTE: this...

CVE-2008-2511

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 aka UmxEventCliLib ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. dot dot in the argument to the SaveToFile method. NOTE: this...

CVE-2008-2511

CVE-2008-2511 describes a directory traversal vulnerability in the CA Internet Security Suite 2008’s UmxEventCli.dll (UmxEventCli.CachedAuditDataList/UmxEventCliLib) ActiveX control. The flaw lets remote attackers supply a ... path to the SaveToFile method, enabling creation or overwriting of arb...

CA Internet Security Suite UmxEventCli.dll控件不安全函数调用漏洞

CA Internet Security Suite是为家庭用户提供的综合网络安全解决方案。 Internet Security Suite所提供的UmxEventCli.CachedAuditDataList.1 ActiveX控件（UmxEventCli.dll）没有安全地调用SaveToFile函数，如果用户受骗访问了恶意网页的话，就可能以当前登录用户的权限覆盖并破坏系统上的任意文件。 Computer Associates Internet Security Suite 2008 Computer Associates -------------------...

CA Internet Security Suite ActiveX unauthorized files access

SaveToFile method allows system files corruption...

CA Internet Security Suite - UmxEventCli.dll ActiveX Control Arbitrary File Overwrite

CA Internet Security Suite - UmxEventCli.dll ActiveX Control Arbitrary File Overwrite source: https://www.securityfocus.com/bid/29406/info A Computer Associates Internet Security Suite ActiveX control is prone to a vulnerability that lets attackers overwrite files with arbitrary,...

CA Internet Security Suite 2008 SaveToFile() File Corruption PoC

Exploit for unknown platform in category dos / poc ================================================================ CA Internet Security Suite 2008 SaveToFile File Corruption PoC ================================================================ filePath="..............\boot.ini"...