CVE-2005-4680

Sophos Anti-Virus before 4.02, 4.5.x before 4.5.9, 4.6.x before 4.6.9, and 5.x before 5.1.4 allow remote attackers to hide arbitrary files and data via crafted ARJ archives, which are not properly scanned...

[Full-disclosure] Someone wasted a nice bug on spyware...

In reference to: http://www.securityfocus.com/archive/1/420288/30/0/threaded I ported the exploit to the Metasploit Framework in case anyone wants to test it without installing a thousand spyware apps... Available from 'msfupdate' for MSF users, or in the 2.5 snapshot:...

Kaspersky Endpoint Security Detection and Status

Kaspersky Endpoint Security, a commercial endpoint security software package for Windows, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable Network Security, Inc...

Construct a special file name to bypass multiple anti-virus engine-vulnerability warning-the black bar safety net

Affected by the anti - virusengine: Kaspersky Antivirus Symantec AntiVirus F-Prot Antivirus ClamWin Antivirus Avast Antivirus RAV AntiVirus Microsoft AntiSpyware Tested version: Symantec AntiVirus Corporate 8.0 Kaspersky Antivirus Personal Pro 4.5.0.104 Kaspersky Antivirus For MS NTServer 4.5.0.1...

Panda Antivirus Detection and Status

Panda Antivirus, a commercial antivirus software package for Windows, is installed on the remote host. However, there is a problem with the installation; either its services are not running or its engine and/or virus definitions are out of date. C Tenable, Inc. include"compat.inc"; if description...

CVE-2005-3664

The CVE-2005-3664 entry describes a heap-based buffer overflow in the Kaspersky Anti-Virus Engine, used by Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50, allowing remote code execution via a crafted CHM file. The provided referenc...

CVE-2005-3664

Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file...

CVE-2005-3663

CVE-2005-3663 describes an unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 that could allow local users to gain privileges via a malicious "program.exe" placed in the C:\ folder. Affected software: Kaspersky Anti-Virus 5.0 (Windows). Underlying cause: unquoted search path h...

CVE-2005-3663

Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder...

CVE-2005-3664

Heap-based buffer overflow in Kaspersky Anti-Virus Engine, as used in Kaspersky Personal 5.0.227, Anti-Virus On-Demand Scanner for Linux 5.0.5, and F-Secure Anti-Virus for Linux 4.50 allows remote attackers to execute arbitrary code via a crafted CHM file...

CVE-2005-3663

Unquoted Windows search path vulnerability in Kaspersky Anti-Virus 5.0 might allow local users to gain privileges via a malicious "program.exe" file in the C: folder...

CVE-2005-3546

suid.cgi scripts in F-Secure 1 Internet Gatekeeper for Linux before 2.15.484 and 2 Anti-Virus Linux Gateway before 2.16 are installed SUID with world-executable permissions, which allows local users to gain privilege...

Kuang2 the Virus

Kuang2 the Virus was found. Kuang2 the Virus is a program that infects all the executables on the system, as well as set up a server that allows the remote control of the computer. The client program allows files to be browsed, uploaded, downloaded, hidden, etc on the infected machine. The client...

Misc information on News server

This script detects if the NNTP server is open to outside, counts the number of groups, and tries to post outside. This channel may been used by virus or trojan. OpenVAS Vulnerability Test $Id: nntpinfo.nasl 8023 2017-12-07 08:36:26Z teissa $ Description: Misc information on News server Authors:...

Bofra Virus Detection

The remote host seems to have been infected with the Bofra virus or one of its variants, which infects machines via an Internet Explorer IFRAME exploit. It is very likely this system has been compromised. OpenVAS Vulnerability Test $Id: bofradetect.nasl 6053 2017-05-01 09:02:51Z teissa $...

ScanMail file check

This script attempts to read sensitive files used by Trend ScanMail, an anti-virus protection program for Domino formerly Lotus Notes. An attacker, exploiting this flaw, may gain access to confidential data or disable the anti-virus protection. OpenVAS Vulnerability Test $Id: lotussmency.nasl 605...

Dabber worm detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...

ScanMail file check

This script attempts to read sensitive files used by Trend ScanMail, an anti-virus protection program for Domino formerly Lotus Notes. SPDX-FileCopyrightText: 2004 by DokFLeed Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MoonLit Virus Backdoor

The system is infected by the MoonLit virus, the backdoor port is open. Backdoor.Moonlit is a Trojan horse program that can download and execute files, and may act as a proxy server. SPDX-FileCopyrightText: 2004 KK Liu Some text descriptions might be excerpted from a referenced sources, and are...

Dabber Worm Detection

W32.Dabber propagates by exploiting a vulnerability in the FTP server component of W32.Sasser.Worm and its variants. It installs a backdoor on infected hosts and tries to listen on port 9898. If the attempt fails, W32Dabber.A tries to listen on ports 9899 through 9999 in sequence until it finds a...