ViRobot Server web interface addschup buffer overflow

Added: 07/28/2006 CVE: CVE-2005-2041 BID: 13964 OSVDB: 17320 Background ViRobot Linux Server includes a web-based control interface. Problem A buffer overflow in the addschup CGI program included in the ViRobot Linux Server allows remote attackers to write arbitrary commands into the root crontab...

ViRobot Server web interface addschup buffer overflow

Added: 07/28/2006 CVE: CVE-2005-2041 BID: 13964 OSVDB: 17320 Background ViRobot Linux Server includes a web-based control interface. Problem A buffer overflow in the addschup CGI program included in the ViRobot Linux Server allows remote attackers to write arbitrary commands into the root crontab...

CVE-2005-4786

The CVE-2005-4786 issue is a buffer overflow in the ALZ archive decompression in vrAZMain.dll (version 5.8.22.137) used by HAURI antivirus products (ViRobot Expert 4.0, ViRobot Advanced Server, HAURI LiveCall). It can allow user‑assisted attackers to execute arbitrary code by processing an ALZ ar...

CVE-2006-0864

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value...

Design/Logic Flaw

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value...

CVE-2006-0864

Affected product: ViRobot Linux Server (filescan component). Vulnerability: Cookie-based authentication bypass due to Cookie header verification failure, enabling an unauthenticated attacker to gain administrative access and potentially delete files or disrupt the service. Impact (as stated): Adm...

CVE-2006-0864

filescan in Global Hauri ViRobot 2.0 20050817 does not verify the Cookie HTTP header, which allows remote attackers to gain administrative privileges via an arbitrary cookie value...

[Full-disclosure] [INetCop Security Advisory] Global Hauri Virobot cookie exploit

======================================== INetCop Security Advisory 2006-0x82-028 ======================================== Title: Global Hauri Virobot cookie exploit 0x01. Description Virobot Unix/Linux Server is anti virus program that develop in Global Hauri. Product in Unix of SUN Sparc, HP, IB...

ViRobot Linux Server filescan Authentication Bypass

Binary data 3443.prm...

Hauri Virobot antivirus privilege esalation

Local user can obtain unrestricted access with suid CGI executable...

ViRobot Linux Server filescan Authentication Bypass

The remote host is running ViRobot Linux Server, a commercial antivirus application server. The installed version of ViRobot Linux Server has a flaw such that an attacker can bypass authentication and gain access to its 'filescan' component by supplying a special cookie. An unauthenticated attack...

[SA16852] HAURI Anti-Virus ALZ Archive Handling Buffer Overflow

TITLE: HAURI Anti-Virus ALZ Archive Handling Buffer Overflow SECUNIA ADVISORY ID: SA16852 VERIFY ADVISORY: http://secunia.com/advisories/16852/ CRITICAL: Highly critical IMPACT: System access WHERE: From remote SOFTWARE: HAURI LiveCall http://secunia.com/product/5448/ ViRobot Advanced Server...

HAURI ViRobot antivirus buffer overflow

ALZ Archive Handling Buffer Overflow...

CVE-2005-2041

Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobotID cookie HTTPCOOKIE...

CVE-2005-2041

CVE-2005-2041 is a confirmed vulnerability in ViRobot Linux Server (ViRobot 2.0) where a buffer overflow in the web CGI program addschup can be triggered by crafted data in the ViRobot_ID cookie (and related cookies in some reports). This overflow may allow an unauthenticated remote attacker to w...

DMA[2005-0614a] - 'Global Hauri ViRobot Server cookie overflow'

DMA2005-0614a - 'Global Hauri ViRobot Server cookie overflow' Author: Kevin Finisterre Vendor: http://www.globalhauri.com Product: 'ViRobot Linux and Unix? Server' References: http://www.digitalmunition.com/DMA2005-0614a.txt Description: HAURI, Inc. is a leading anti-virus solution provider in th...

ViRobot anti-virus server buffer overflow

Multiple buffer overflows...

CVE-2005-2041

Buffer overflow in addschup in HAURI ViRobot 2.0, and possibly other products, allows remote attackers to execute arbitrary code via a long ViRobotID cookie HTTPCOOKIE...

ViRobot Linux Server addschup Multiple Overflows

The remote host is running ViRobot Linux Server, a commercial anti- virus product for Linux. According to its banner, the installed version of ViRobot Linux Server suffers from a remote buffer overflow vulnerability in its web-based management interface. By passing specially crafted data through...

ViRobot Advanced Server 2.0 - addschup Remote Cookie

ViRobot Advanced Server 2.0 - addschup Remote Cookie !/usr/bin/perl ViRobot 2.0 remote cookie exploit - ala addschup copyright Kevin Finisterre kflistsatdigitalmunitiondotcom jdam:/home/kfinisterre ls -al /var/spool/cron/root ls: /var/spool/cron/root: No such file or directory...