CVE-2006-3489

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier allows remote attackers to bypass anti-virus scanning via a crafted filename...

CVE-2006-3490

F-Secure Anti-Virus 2003 through 2006 and other versions, Internet Security 2003 through 2006, and Service Platform for Service Providers 6.x and earlier does not scan files contained on removable media when "Scan network drives" is disabled, which allows remote attackers to bypass anti-virus...

Hey Hey:a few dangerous files-the vulnerability warning-the black bar safety net

We know. bat is a DOS Batch command file, we can use Notepad to edit and add some commands to run after the system will automatically one by one to execute the command. So some dangerous commands will be some people with ulterior motives written into the batch file to go, online spread sabotage,...

Create personalized free kill version firewall, anti-virus software-bug warning-the black bar safety net

Preface: As is well known, now more and more virus lovers in order to demonstrate individual ability or some of the hidden secrets and the production of a series of virus programs; however, since most of the domestic users on the network security have more understanding, will be in their own...

Track"Warcraft Games"the Trojan of password transmission mode-bug warning-the black bar safety net

Review: If your system does not accidentally infected with a Trojan virus,and unfortunately the game account password or your QQ password has to be others to steal. Then,we identify the virus,if the virus is found in the"stallion"of the"contact information"? If you are lucky, not only can get bac...

Trend Micro Control Manager (TMCM) Persistent XSS Vulnerability

Trend Micro Control Manager TMCM Persistent XSS Vulnerability June 23, 2006 Product Overview: Trend Micro Control Manager is a centralized, web-based outbreak management console designed to simplify enterprise-wide coordination of outbreak security actions and management of Trend Micro products a...

CVE-2006-3222

The FTP proxy module in Fortinet FortiOS FortiGate before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive EPSV FTP mode...

CVE-2006-3222

The vulnerability CVE-2006-3222 affects Fortinet FortiOS FortiGate devices where the FTP proxy module (before 2.80 MR12 and 3.0 MR2) can bypass antivirus scanning by abusing Enhanced Passive (EPSV) FTP mode. Affected product: FortiGate/FortiOS FTP proxy. Root cause: FTP proxy mishandles EPSV in a...

Bypassing of web filters by using ASCII

iKu Advisory Product : Microsoft InternetExplorer 6 : various filter applications Date : June 20th 2006 Affected versions : all Vulnerability Type : bypassing security filters Severity 1-10 : 10 Remote : yes 0. contents 1. problem description 2. affected software 3. bug description/possible fix 4...

CVE-2006-3074

KVE-2006-3074 affects Kaspersky Internet Security 6.0/7.0 and KAV 6.0/7.0 (Windows Workstations/Servers). The vulnerability arises from insufficient validation of parameters to hooked system calls (NtCreateKey, NtCreateProcess, NtCreateProcessEx, NtCreateSection, NtCreateSymbolicLinkObject, NtCre...

Symantec Antivirus Software Detection and Status

A Symantec antivirus application is installed on the remote host. Note that this plugin checks that the application is running properly and that its latest virus definitions are loaded. This script has been rewritten by Montgomery County Original script was written by Jeff Adams and Tenable Netwo...

Hiding Threads from User-mode

Hiding Threads from User-mode KAV's errors with hooking do not end with NtOpenProcess, however. One of the system services KAV hooks is NtQuerySystemInformation. This routine's behavior is modified to sometimes truncate a thread listing from certain processes when the SystemProcessesAndThreads...

CVE-2006-2838

Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections ar...

Buffer overflow

Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown attack vectors. NOTE: By default, the connections ar...

CVE-2006-2838

CVE-2006-2838 affects F-Secure products with a buffer overflow in the Web Console of multiple components, specifically F-Secure Anti-Virus for Microsoft Exchange 6.40 and Internet Gatekeeper 6.40–6.42, and 6.50. The vulnerability allows an unauthenticated, remote attacker to cause a denial of ser...

IntelliTamper 2.07 (*.map file) Local Arbitrary Code Execution Exploit

No description provided by source. /////////////////////////////////////////////////////////////////// //++ // IntelliTamper web analysis .Map File Handling Local Exploit // // Discovery By: Devil00 [email protected] // Coded By: JAAScois http://www.jaascois.com //++...

FreeBSD : clamav -- Freshclam HTTP Header Buffer Overflow Vulnerability (b088bf48-da3b-11da-93e0-00123ffe8333)

Secunia reports : A vulnerability has been reported in ClamAV, which can be exploited by malicious people to cause a DoS Denial of Service and potentially to compromise a vulnerable system. The vulnerability is caused due to a boundary error within the HTTP client in the Freshclam command line...

CVE-2006-2334

The RtlDosPathNameToNtPathNameU API function in NTDLL.DLL in Microsoft Windows 2000 SP4 and XP SP2 does not properly convert DOS style paths with trailing spaces into NT style paths, which allows context-dependent attackers to create files that cannot be accessed through the expected DOS path or...

CVE-2006-2334

The CVE-2006-2334 issue affects the Windows NT kernel user-mode path conversion: the RtlDosPathNameToNtPathName_U API in NTDLL.DLL on Windows 2000 SP4 and XP SP2 mishandles DOS-style paths with trailing spaces, allowing context-dependent attackers to create files that aren’t accessible via the ex...

CVE-2006-0994

Multiple Sophos Anti-Virus products, including Anti-Virus for Windows 5.x before 5.2.1 and 4.x before 4.05, when cabinet file inspection is enabled, allows remote attackers to execute arbitrary code via a CAB file with "invalid folder count values," which leads to heap corruption...