Sophos产品MIME附件处理拒绝服务漏洞

BUGTRAQ ID: 30110 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos杀毒软件处理畸形的数据时存在漏洞，如果用户使用Sophos杀毒软件扫描了0字节的MIME附件的话，就会导致应用程序意外终止。 Sophos Anti-Virus Sophos Pure Message for Unix Sophos Email Appliance Sophos ------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.sophos.com/...

2 0 0 8 all the active Defense of ideas-vulnerability warning-the black bar safety net

| Hello everyone, I'm a sailor, and talked about soft kill active Defense, but this year a hot topic, mostly what modify time is too Kabbah take the initiative and restore SSDT table topics like, now to modify the time through the Kabbah take the initiative on the new version of the card bar has ...

Stack overflow

Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call...

CVE-2008-1518

CVE-2008-1518 describes a local privilege escalation in Kaspersky Lab products. The vulnerable component is the kernel driver kl1.sys used by Kaspersky Anti-Virus 6.0/7.0 and Internet Security 6.0/7.0. The issue is a stack-based buffer overflow triggered in the handling of IOCTL 0x800520e8 due to...

Kaspersky Multiple Products kl1.sys Driver Local Overflow

The version of the Kaspersky product installed on the remote host contains a stack-based overflow in its 'kl1.sys' kernel driver involving its handling of IOCTL 0x800520e8. A local attacker may be able to leverage this issue to gain complete control of the affected system. C Tenable Network...

Update Protection Against Computer Associates (CA) Product Alert Notifications Server Multiple Buffer Overflow Vulnerabilities

Several buffer overflow vulnerabilities have been identified in CA Product Alert Notification Service Alert.exe that could allow a remote attacker to execute arbitrary code or cause a Denial of Service in several versions of CA Anti-Virus for Enterprise, CA Threat Manager for Enterprise and CA...

Unfixed XSS vulnerability at www.virus-radar.com

Security researcher C1c4Tr1Z, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.virus-radar.com, which at the time of submission ranked 277017 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2008. It is...

Virus Security heap overflow vulnerability

Overview SourceNext Virus Security has a problem in the email processing. It is affected by a heap overflow vulnerability when receiving specially crafted emails. Impact A remote attacker may cause a denial of service and execute arbitrary code with the Local System privilege. Solution None...

Virus Security memory leak vulnerability

Overview SourceNext Virus Security has a problem in processing a specially crafted email. When the email has a virus as an attachment and Virus Security detects that virus, memory leak occurs. Impact A remote attacker may conduct a denial of service DoS attack. Solution None...

Virus Buster Corporate Edition vulnerability

Overview Virus Buster Corporate Edition contains a vulnerability which may allow an attacker to view the OPP.ini file Outbreak Prevent Policy configuration file, when a specific URL is entered to the management console. Impact An attacker could distrubute viruses that sneak through the policy by...

[SECURITY] Fedora 9 Update: clamav-0.93-1.fc9

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

CVE-2008-1737

Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service reboot with the product disabled and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateK...

Code injection

Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service reboot with the product disabled and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateK...

Sophos Anti-Virus SSDT钩子本地拒绝服务漏洞

BUGTRAQ ID: 28743 CVECAN ID: CVE-2008-1737 Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos杀毒软件的NtCreateKey函数没有正确地验证参数，本地攻击者可能利用此漏洞导致程序不可用。 相关的代码如下： /----------- int cdecl NtCreateKeyHookPHANDLE pKeyHandle, ACCESSMASK DesiredAccess, POBJECTATTRIBUTES ObjectAttributes, ULONG TitleIndex,PUNICODESTRING...

CVE-2008-1737

Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service reboot with the product disabled and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateK...

CVE-2008-1737

CVE-2008-1737 corresponds to multiple antivirus/anti‑virus SSDT-hook vulnerabilities, notably Sophos Anti‑Virus 7.x with Runtime Behavioural Analysis. The technical description in the connected docs shows insufficient argument validation in hooked SSDT functions (NtCreateKey, NtOpenProcess, NtDel...

[SECURITY] Fedora 7 Update: clamav-0.92.1-2.fc7

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

CA Alert Notification服务多个RPC栈溢出漏洞

BUGTRAQ ID: 28605 CVECAN ID: CVE-2007-4620 Alert Notification Server是很多CA产品中都在使用的服务，用于向控制台用户提供通知。 Alert Notification服务在处理畸形格式的RPC请求时存在漏洞，远程攻击者可能利用此漏洞控制服务器。 Alert Notification服务以GUID...

Common left the back door approach-vulnerability warning-the black bar safety net

For us such a dish hand, finally got the servers is not easy, if it is found it miserable. In fact, the open back door methods there are many, below I to talk, I've learned of several ways. 1. Setuid cp /bin/sh /tmp/. root chmod u-s /tmp/. root Add suid bit to the shell on, although very simple,...

F-Secure Archive Handling RCE (FSC-2008-2)

The version of F-Secure Anti-Virus installed on the remote host fails to handle specially crafted archives. A remote attacker can exploit this issue to crash the application or execute arbitrary code with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...