CVE-2006-6960

The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to bypass the malware detection via files with 1 RAR, 2 GZ, 3 TAR, 4 CAB, or 5 ACE compression...

CVE-2004-2676

The Spy Sweeper Enterprise Client SpySweeperTray.exe in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges...

CVE-2004-2676

The CVE-2004-2676 issue affects WebRoot Spy Sweeper, specifically the SpySweeperTray.exe component in Spy Sweeper before version 2.0. The vulnerability is that it does not drop privileges when using the help functionality, allowing local users to gain privileges. The available sources identify th...

CVE-2006-6959

WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modifying certain registry keys...

CVE-2006-6960

The CVE concerns WebRoot Spy Sweeper (Compression Sweep) prior to version 4.5.9 failing to handle non-ZIP archives. Specifically, the feature does not process archives in RAR, GZ, TAR, CAB, or ACE formats, which can allow remote attackers to bypass malware detection. Affected component: Compressi...

CVE-2006-6959

The CVE-2006-6959 entry concerns WebRoot Spy Sweeper (4.5.9 and earlier). The vulnerability allows local users to bypass the Startup-Shield security restrictions by modifying certain registry keys, i.e., a local-privilege impact via registry edits. The available documents specify the affected pro...

CVE-2006-6961

WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detection by changing a file's name...

CVE-2004-2676

The Spy Sweeper Enterprise Client SpySweeperTray.exe in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges...

[SA13187] Spy Sweeper Enterprise Privilege Escalation Vulnerability

TITLE: Spy Sweeper Enterprise Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA13187 VERIFY ADVISORY: http://secunia.com/advisories/13187/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Spy Sweeper Enterprise 1.x http://secunia.com/product/4256/...

Webroot Spy Sweeper weak encryption

Password is stored in registry uencrypted...

[Full-Disclosure] Webroot Spy Sweeper Enterprise Adminpassord open to the world

Not sure if this list is the right place for this....... Spy Sweeper Enterprise from webroot http://www.webroot.com/products/spysweeper/enterprise/ leaves the admin password in plain site you can find it by going to HKEYLOCALMACHINESOFTWAREWebrootEnterpriseSpy Sweeperap This can be done from the...