CVE-2002-2285

Vulnerability summary: In eTrust InoculateIT 6.0, enabling the "Incremental Scan" option may certify a file as virus-free before it is fully downloaded, allowing a bypass of virus detection. Affected product/version: eTrust InoculateIT 6.0. Root cause / behavior: premature virus validation during...

CVE-2000-1244

Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection...

CVE-2000-1244

CVE-2000-1244 affects the Computer Associates InoculateIT Agent for Exchange Server. The underlying issue is that the product does not recognize a virus attachment when the SMTP header is missing the “From” field, allowing remote attackers to bypass virus protection. The NVD entry assigns a CVSS ...

openSUSE 10 Security Update : clamav (clamav-2242)

The virus scan engine ClamAV was update to version 0.88.6. Following issues are fixed by this update : - freshclam: apply timeout patch from Everton da Silva Marques new options: ConnectTimeout and ReceiveTimeout - clamd: change stack size at the right place closes clamav bug103 -...

openSUSE 10 Security Update : sylpheed-claws (sylpheed-claws-2685)

The mailreader sylpheed-claws directly links to the clamav virus scan engine. Since we released clamav 0.90 which contains a library so version change we need to release this package to align the requirements. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2003-1342

The CVE-2003-1342 entry concerns Trend Micro Virus Control System (TVCS) 1.8 running on IIS, where remote attackers can trigger a denial of service by issuing multiple URL requests for ActiveSupport.exe, causing memory consumption on IIS. The available sources confirm the vendor/product/version a...

CVE-2003-1342

Trend Micro Virus Control System TVCS 1.8 running with IIS allows remote attackers to cause a denial of service memory consumption in IIS via multiple URL requests for ActiveSupport.exe...

CVE-2003-1344

The affected component is Trend Micro Virus Control System (TVCS) Log Collector. The vulnerability allows remote attackers to access log files by requesting getservers.exe with the action parameter set to "selects1", exposing usernames, encrypted passwords, and other sensitive information. The CV...

CVE-2003-1344

Trend Micro Virus Control System TVCS Log Collector allows remote attackers to obtain usernames, encrypted passwords, and other sensitive information via a URL request for getservers.exe with the action parameter set to "selects1", which returns log files...

CVE-2007-5143

F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted 1 archive or 2 packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to...

Cross site scripting

F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted 1 archive or 2 packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to...

CVE-2007-5143

F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition is affected by CVE-2007-5143. Local users can bypass virus scanning by placing a crafted (archive or packed executable) into the system32 directory. In many environments this does not cross privilege boundaries since a process that can wr...

CVE-2007-5143

F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted 1 archive or 2 packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to...

F-Secure Anti-Virus for Windows system32 Directory Crafted File Detection Bypass

The remote host is running F-Secure Anti-Virus for Windows Servers. According to its version, the installation of this software on the remote host may allow an attacker by bypass antivirus scanning by placing a specially crafted archive or packed executable into the 'system32' folder. Note that...

SOL7985 - ClamAV clamav-milter vulnerability - CVE-2007-4560

The FirePass controller can be configured to provide anti-virus scanning of files uploaded through Portal Access through the ClamAV open source software. Scanning is configured on the Antivirus tab of the Portal Access: Content Inspection page, through the Enable Standalone virus Scanner option...

CVE-2007-5086

Kaspersky Anti-Virus KAV and Internet Security 7.0 build 125 do not properly validate certain parameters to System Service Descriptor Table SSDT and Shadow SSDT function handlers, which allows local users to cause a denial of service crash via the 1 NtUserSendInput, 2 LoadLibraryA, 3 NtOpenProces...

Code injection

Kaspersky Anti-Virus KAV and Internet Security 7.0 build 125 do not properly validate certain parameters to System Service Descriptor Table SSDT and Shadow SSDT function handlers, which allows local users to cause a denial of service crash via the 1 NtUserSendInput, 2 LoadLibraryA, 3 NtOpenProces...

CVE-2007-5086

CVE-2007-5086 concerns Kaspersky Anti-Virus/Internet Security 7.0.0.125 where SSDT and Shadow SSDT parameter validation is insufficient, enabling local users to trigger a crash (DoS) via kernel hooks in kylif.sys (NtUserSendInput, LoadLibraryA, NtOpenProcess, NtOpenThread, NtTerminateProcess, NtU...

kav/kis 6/7 vulnerabilities-vulnerability warning-the black bar safety net

Foreign famous Rootkit research site rootkit. com published an article: "Exploiting Kaspersky Antivirus 6.0-7.0" the author as EPXOFF/UG North,is famous for its anti-Rootkit tool Rootkit Unhooker,Process walker developers. The article said that Kaspersky Anti-virus software from 6. 0 to the curre...

CVE-2007-4787

The virus detection engine in Sophos Anti-Virus before 2.49.0 does not properly process malformed 1 CAB, 2 LZH, and 3 RAR files with modified headers, which might allow remote attackers to bypass malware detection...