Sophos Anti-Virus SIT文档解析栈溢出漏洞

Sophos Anti-Virus是一款适用于多种操作系统的杀毒软件。 Sophos AntiVirus在解析SIT文档时存在栈溢出漏洞，远程攻击者可能利用此漏洞在扫描机器上执行指令。 CPIO文档中的超长非NULL字符结尾的文件名串会导致veex.dll发生栈溢出。 Sophos Anti-Virus http://www.sophos.com/support/knowledgebase/article/21637.html...

ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability

ZDI-06-045: Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-045.html December 12, 2006 -- CVE ID: CVE-2006-6335 -- Affected Vendor: Sophos -- Affected Products: All versions of Sophos Anti-Virus v2.40 scanning engine --...

ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability

ZDI-06-046: Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-046.html December 12, 2006 -- CVE ID: CVE-2006-6335 -- Affected Vendor: Sophos -- Affected Products: All versions of Sophos Anti-Virus v2.40 scanning engine --...

CVE-2006-6335

Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via 1 a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and 2 a CPIO...

CVE-2006-6335

Sophos Anti-Virus (scanning engine) before 2.40 is affected. In veex.dll, two parsing flaws cause remote code execution: (1) parsing SIT archives with long, non-terminated filenames leads to a heap overflow; (2) parsing CPIO archives with long, non-terminated filenames leads to a stack overflow. ...

CVE-2006-6335

Multiple buffer overflows in Sophos Anti-Virus scanning engine before 2.40 allow remote attackers to execute arbitrary code via 1 a SIT archive with a long filename that is not null-terminated, which triggers a heap-based overflow in veex.dll due to improper length calculation, and 2 a CPIO...

mxBB Module Activity Games 0.92 Remote File Include Exploit

No description provided by source. !/usr/bin/perl mxact mxBB Games Module --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/index.php?page=4&action=file&fileid=71 use LWP::UserAgent; $target=@ARGV0; $shellsite=@ARGV1; $cmdv=@ARGV2;...

mxBB Module kb_mods <= 2.0.2 Remote Inclusion Vulnerabilities

No description provided by source. | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...

mxBB Module kb_mods <= 2.0.2 Remote Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= mxBB Module kbmods \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...

Sophos Anti-Virus CPIO Archive Parsing Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sophos Anti-Virus. The specific flaw exists in the parsing of CPIO archives. When a long non-null terminated filename is processed by veex.dll, a stack overflow occurs. Exploitation is possible...

mxBB Module kb_mods 2.0.2 - Remote File Inclusion

mxBB Module kbmods 2.0.2 - Remote File Inclusion | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...

mxBB Module newssuite 1.03 Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl mxBB newssuite Module v1.5 --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=17 PoC:...

mxBB Module newssuite 1.03 - Remote File Inclusion

mxBB Module newssuite 1.03 - Remote File Inclusion !/usr/bin/perl mxBB newssuite Module v1.5 --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/modules/mxpafiledb/dload.php?action=download&fileid=17 PoC:...

Sophos Anti-Virus SIT Archive Parsing Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Sophos Anti-Virus. The specific flaw exists in the parsing of SIT archives. When a long non-null terminated filename is processed by veex.dll, a heap overflow occurs due to the miscalculation of th...

mxBB Module kb_mods 2.0.2 - Remote File Inclusion

| \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/ =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-==-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-= Knowledgebase kbmods...

mxBB Module mx_profilecp 0.91 Remote File Include Vulnerability

No description provided by source. | \ | / | \ \ / | | | | | \ / | \ \ / / | | | | '| | |/| |/ \ / / \ / / | | '| | | / | | || | | | | | | | | \ / | | | | || \ \ |/|| || ||,//\ / ||| ,|/...

mxBB Module Activity Games 0.92 Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= mxBB Module Activity Games 0.92 Remote File Include Vulnerability ================================================================= mxact mxBB Games Module --Remote File...

mxBB Module Activity Games 0.92 Remote File Include Vulnerability

No description provided by source. mxact mxBB Games Module --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/index.php?page=4&action=file&fileid=71 Problem area: if !fileexists$mxrootpath . 'modules/mxact/language/lang'...

mxBB Module Activity Games 0.92 - Remote File Inclusion

mxact mxBB Games Module --Remote File Inclusion Exploit Bug Found & Exploit coded By Dr Max Virus Download:http://www.mx-system.com/index.php?page=4&action=file&fileid=71 Problem area: if !fileexists$mxrootpath . 'modules/mxact/language/lang' . $boardconfig'defaultlang' . '/langactivity.'.$phpEx...

Clam Anti-Virus MIME附件拒绝服务漏洞

Clam Anti-Virus是一款流行的反病毒程序。 Clam Anti-Virus处理畸形的BASE64编码MIME附件存在问题，远程攻击者利用漏洞对应用程序进行拒绝服务攻击。 提交特殊构建的BASE64编码的MIME附件诱使Clam Anti-Virus解析，可导致由于NULL指针引用而造成应用程序崩溃。 Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debia...