CVE-2012-1434: Undefined Security Weakness

The Microsoft EXE file parser in AhnLab V3 Internet Security 2011.01.18.00, Emsisoft Anti-Malware 5.1.0.1, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, and Panda Antivirus 10.0.2.7 allows remote attackers to bypass malware detection via an EXE file with a \19\04\00\10 character sequen...

CVE-2012-1448: Undefined Security Weakness

The CAB file parser in Quick Heal aka Cat QuickHeal 11.00, Trend Micro AntiVirus 9.120.0.1004, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Trend Micro HouseCall 9.120.0.1004, and Emsisoft Anti-Malware 5.1.0.1 allows remote attackers to bypass malware detection via a CAB file with a...

PT-2012-3257

Name of the Vulnerable Software and Affected Versions Emsisoft Anti-Malware version 5.1.0.1 eSafe version 7.0.17.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Panda Antivirus version 10.0.2.7 Description The issue allows remote attackers to bypass malware detection. This is...

CVE-2012-1423: Undefined Security Weakness

The TAR file parser in Command Antivirus 5.2.11.5, Emsisoft Anti-Malware 5.1.0.1, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, K7 AntiVirus 9.77.3565, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, PC Tools AntiVirus 7.0.3.5,...

PT-2012-3277

Name of the Vulnerable Software and Affected Versions Emsisoft Anti-Malware version 5.1.0.1 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Quick Heal version 11.00 Description The issue allows remote attackers to bypass malware detection. This is achieved via a CAB file with a...

PT-2012-3273

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Trend Micro AntiVirus version 9.120.0.1004 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Trend Micro HouseCall version 9.120.0.1004 Emsisoft Anti-Malware version 5.1.0.1 Description The issue allows...

PT-2012-3268

Name of the Vulnerable Software and Affected Versions ClamAV version 0.96.4 Rising Antivirus version 22.83.00.03 Quick Heal version 11.00 G Data AntiVirus version 21 AVEngine version 20101.3.0.103 in Symantec Endpoint Protection 11 Command Antivirus version 5.2.11.5 Ikarus Virus Utilities T3...

PT-2012-3260

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 Emsisoft Anti-Malware version 5.1.0.1 eSafe version 7.0.17.0 Ikarus Virus Utilities T3 Command Line Scanner version 1.1.97.0 Panda Antivirus version 10.0.2.7 Description The Microsoft EXE file...

CVE-2012-1459: Undefined Security Weakness

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal aka Cat QuickHeal 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo...

[SECURITY] Fedora 15 Update: postgresql-9.0.7-1.fc15

PostgreSQL is an advanced Object-Relational database management system DBMS that supports almost all SQL constructs including transactions, sub-selects and user-defined types and functions. The postgresql package includes the client programs and libraries that you'll need to access a PostgreSQL...

Sunway ForceControl SNMP NetDBServer Data Chunk Copy Buffer Overflow

Added: 02/22/2012 BID: 49747 OSVDB: 75798 Background Sunway ForceControl is a Chinese SCADA/HMI software application widely used in China to help run weapons systems, utilities and chemical plants. It is also used to a lesser extent in other countries, including the US. SNMP NetDBServer is one of...

Sunway ForceControl SNMP NetDBServer Data Chunk Copy Buffer Overflow

Added: 02/22/2012 BID: 49747 OSVDB: 75798 Background Sunway ForceControl is a Chinese SCADA/HMI software application widely used in China to help run weapons systems, utilities and chemical plants. It is also used to a lesser extent in other countries, including the US. SNMP NetDBServer is one of...

Low: Red Hat Security Advisory: util-linux security, bug fix, and enhancement update

An updated util-linux package that fixes multiple security issues, various bugs, and adds two enhancements is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having low security impact. Common Vulnerability Scoring System CVSS base scores,...

nfs-utils: mount.nfs fails to anticipate RLIMIT_FSIZE

The nfsaddmntent function in support/nfs/nfsmntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMITFSIZE value,...

RedHat Update for glibc RHSA-2012:0126-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2012-1078

The System Utilities sysutils extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup output directory."...

CVE-2012-1078

The System Utilities sysutils extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup output directory."...

PT-2012-3066

Name of the Vulnerable Software and Affected Versions System Utilities sysutils extension versions 1.0.3 and earlier for TYPO3 Description The issue allows remote attackers to obtain sensitive information via unspecified vectors related to improper protection of the backup output directory...

CVE-2012-1078: Undefined Security Weakness

The System Utilities sysutils extension 1.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unspecified vectors related to improper "protection" of the "backup output directory."...

Symantec releases patch to address pcAnywhere source code exposure

Symantec releases patch to address pcAnywhere source code exposure Anonymous activists have released source code for PCAnywhere onto the internet, hours after a hacker's negotiations for payment from Symantec broke down. Symantec code exposure turns up danger to pcAnywhere customers.Symantec has...