9958 matches found
CA Multiple Products inoweb Console Server Authentication Remote Overflow
The version of CA Anti-Virus for the Enterprise, CA Threat Manager, or CA Anti-Spyware installed on the remote host is affected by a buffer overflow involving its Console Server component. By means of specially crafted login credentials, a remote attacker can overflow a stack-based buffer in...
yaap-rfi.txt
-------------------------------------------------------------------------------- Script name.......:Yaap Affected Version.....:1.5 D.page..:http://yaap.oskbraniewo.pl/download/yaap15.tar.gz -------------------------------------------------------------------------------- Author:3l3ctric-Cracker Dr...
CA Multiple Products InoCore.dll File Mapping Manipulation Local Overflow
The version of CA Anti-Virus for the Enterprise / Threat Manager installed on the remote host is affected by a stack-based buffer overflow involving its task service, InoTask.exe. By supplying a long path to the file job's path, a local attacker can overflow a buffer in the 'QSIGetQueueID' functi...
Modifications introduced into the table to create penetration KIS6 download-vulnerability warning-the black bar safety net
Article author: gyzy E. S. T it www.gyzy.org） Information source: evil octal information security team www.eviloctal.com） This article has been published in the hacker line of Defense of the 2 0 0 7 year 2 monthly. The author and the hacker line of Defense on the retention of copyright, reproduce...
KLA10118 DoS vulnerability in Clam Anti-virus
An unspecified vulnerability was found in Clam Anti-virus. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited locally at a point related to the OLE2 parser via a specially designed file.. Original advisories Message with vulnerability...
YAAP <= 1.5 __autoload() Remote File Inclusion Vulnerability
Exploit for unknown platform in category web applications ============================================================ YAAP = 1.5 autoload Remote File Inclusion Vulnerability ============================================================...
YAAP 1.5 - '__autoload()' Remote File Inclusion
-------------------------------------------------------------------------------- Script name.......:Yaap Affected Version.....:1.5 D.page..:http://yaap.oskbraniewo.pl/download/yaap15.tar.gz -------------------------------------------------------------------------------- Author:3l3ctric-Cracker Dr...
CVE-2007-2522
Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...
Stack overflow
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions NULL security descriptor for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before...
Stack overflow
Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...
CVE-2007-2522
Summary (CVE-2007-2522): A stack-based buffer overflow in the CA Console Server component (InoWeb.exe) of multiple CA products (CA Anti-Virus for the Enterprise, CA Threat Manager, CA Anti-Spyware for the Enterprise, CA Protection Suites) allows remote attackers to execute arbitrary code by sendi...
CVE-2007-2522
Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long 1 username or 2 password...
CVE-2007-2523
CA Anti-Virus for the Enterprise r8 and CA Threat Manager r8 contain a local stack-based buffer overflow in InoCore.dll triggered by modifying a NULL-security-descriptor Task Service file mapping (InoTask.exe) via a crafted path. This allows a local attacker to gain SYSTEM-level privileges. The i...
CVE-2007-2523
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions NULL security descriptor for the Task Service shared file mapping, which allows local users to modify this mapping and gain privileges by triggering a stack-based buffer overflow in InoCore.dll before...
User about antivirus real-time monitoring and memory antivirus-vulnerability warning-the black bar safety net
Antivirus real-time monitoring with in-memory scanning is a thing? Of course not. If not, then they have what is the difference? In General, real-time monitoring is mainly to monitor the virus on the hard disk of the rewrite operation, the memory scan is mainly scans the memory of all processes a...
Kaspersky Anti-Virus < 6.0.2.614 Multiple Vulnerabilities
The version of the Kaspersky antivirus product installed on the remote host may be affected by buffer overflow, privilege escalation, and information disclosure vulnerabilities, depending on the actual product installed. C Tenable Network Security, Inc. include"compat.inc"; if description...
Integer overflow
Integer overflow in the NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows context-dependent attackers to execute arbitrary code via a large, unsigned...
Design/Logic Flaw
Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the a AXKLPROD60Lib.KAV60Info AxKLProd60.dll and b AXKLSYSINFOLib.SysInfo AxKLSysInfo.dll ActiveX controls, which allows remote attackers to "download" or delete arbitrary files via crafted arguments to the 1 DeleteFile,...
Design/Logic Flaw
The StartUploading function in KL.SysInfo ActiveX control AxKLSysInfo.dll in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to read arbitrary files by triggering an outbound anonymous FTP session that invokes the PUT command...
CVE-2007-0445
Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and Internet Security 6.0 before Maintenance Pack 2 build 6.0.2.614 allows remote attackers to execute arbitrary code via crafted ARJ...