PT-2007-5741 · Trustwave · Bufferzone

Name of the Vulnerable Software and Affected Versions: BufferZone versions 2.1 through 2.5 Description: The issue is related to a buffer underflow in the redlight.sys component. It can be triggered by sending a small buffer size value to the FsSetVolumeInformation IOCTL handler code with a...

Design/Logic Flaw

Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow remote attackers to prevent examination of certain data, a related issue to CVE-2007-4035...

CVE-2007-4201

Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow remote attackers to prevent examination of certain data, a related issue to CVE-2007-4035...

CVE-2007-4201

Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow remote attackers to prevent examination of certain data, a related issue to CVE-2007-4035...

CVE-2007-4201

CVE-2007-4201 concerns Guidance Software’s EnCase (versions 6.2/6.5). The issue: EnCase may fail to properly handle a volume with more than 25 partitions, making hidden or extra partitions potentially inaccessible for examination. The root cause is a limitation in partition visibility that preven...

SYM07-009,Symantec Storage Foundation for Windows Volume Manager: Authentication Bypass and Potential Code Execution in Scheduler Service

Symantec Security Advisory http://www.symantec.com/avcenter/security/Content/2007.06.01.html SYM07-009 1 June, 2007 Symantec Storage Foundation for Windows Volume Manager: Authentication Bypass and Potential Code Execution in Scheduler Service Revision History None Severity Medium Remote Access...

CVE-2007-1593

The administrative service in Symantec Veritas Volume Replicator VVR for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service memory consumption and service crash via a crafted packet to the service...

CVE-2007-1593: Undefined Security Weakness

The administrative service in Symantec Veritas Volume Replicator VVR for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service memory consumption and service crash via a crafted packet to the service...

Solaris 9 (sparc) : 115217-05

Version 4.0 of Volume Manager on the remote Solaris 9 host is missing security patch 115217-05 for package VRTSvxvm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24993; scriptversion"1.13";...

Solaris 8 (sparc) : 115217-05

Version 4.0 of Volume Manager on the remote Solaris 8 host is missing security patch 115217-05 for package VRTSvxvm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24984; scriptversion"1.13";...

Solaris 5.7 (sparc) : 110262-05

Veritas Volume Manager 3.0.4: general patch for Solaris 7. Date this patch was last updated by Sun : Jun/08/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security,...

Solaris 5.8 (sparc) : 110263-05

Veritas Volume Manager 3.0.4: general patch for Solaris 8. Date this patch was last updated by Sun : Jun/08/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security,...

Solaris 2.5.1 (sparc) : 110260-05

The remote host is missing Sun Security Patch number 110260-05 Veritas Volume Manager 3.0.4: general patch for Solaris 2.5.1. Date this patch was last updated by Sun : Tue Mar 12 09:59:54 MST 2002 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Th...

Solaris 5.6 (sparc) : 110261-05

Veritas Volume Manager 3.0.4: general patch for Solaris 2.6. Date this patch was last updated by Sun : Jun/08/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Securit...

Solaris 5.9 (sparc) : 112392-08

VxVM 3.5: Maintenance Patch for Volume Manager 3.5. Date this patch was last updated by Sun : Aug/25/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...

Solaris 5.7 (sparc) : 112392-08

VxVM 3.5: Maintenance Patch for Volume Manager 3.5. Date this patch was last updated by Sun : Aug/25/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. i...

Solaris 7 (sparc) : 115217-05

Version 4.0 of Volume Manager on the remote Solaris 7 host is missing security patch 115217-05 for package VRTSvxvm. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24974; scriptversion"1.13";...

TrueCrypt 4.3 - setuid Local Privilege Escalation

TrueCrypt 4.3 - setuid Local Privilege Escalation $Id: raptortruecrypt,v 1.1.1.1 2007/04/04 11:31:56 raptor Exp $ raptortruecrypt - setuid truecrypt privilege escalation Copyright c 2007 Marco Ivaldi TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service...

TrueCrypt 4.3 - 'setuid' Local Privilege Escalation

$Id: raptortruecrypt,v 1.1.1.1 2007/04/04 11:31:56 raptor Exp $ raptortruecrypt - setuid truecrypt privilege escalation Copyright c 2007 Marco Ivaldi TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service filesystem unavailability or gain privileges by mounting...

CVE-2007-1738: Undefined Security Weakness

TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service filesystem unavailability or gain privileges by mounting a crafted TrueCrypt volume, as demonstrated using 1 /usr/bin or 2 another user's home directory, a different issue than CVE-2007-1589...