Novell ZENworks Desktop Management ActiveX Control Buffer Overflow (CVE-2008-5073)

Novel ZENworks Desktop Management is a resource management solution for workstations and laptops. The product include various software components that are installed on management and managed computers. One of these software components is an ActiveX control implemented in file AxNalServer.dll. A...

CVE-2009-4642

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

DEBIAN-CVE-2009-4642

gnome-screensaver 2.26.1 relies on the gnome-session D-Bus interface to determine session idle time, even when an Xfce desktop such as Xubuntu or Mythbuntu is used, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

F-Secure Products Malware Detection Bypass Vulnerability (Windows)

This host is installed with F-Secure Product and is prone to Malware Detection Bypass Vulnerability. OpenVAS Vulnerability Test $Id: secpodfsecureprdtssecbypassvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ F-Secure Products Malware Detection Bypass Vulnerability Windows Authors: Sharath S Copyrigh...

CVE-2009-0449

CVE-2009-0449 corresponds to a buffer overflow in klim5.sys within Kaspersky Anti-Virus for Workstations 6.0 and Anti-Virus 2008, enabling local privilege escalation via an IOCTL 0x80052110 call. The OpenVAS/NVD entries describe the affected driver and the local-exploit condition; CVSS v2 base sc...

Kaspersky (Multiple Products) - klim5.sys Local Privilege Escalation

Kaspersky Multiple Products - klim5.sys Local Privilege Escalation source: https://www.securityfocus.com/bid/33561/info Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. A...

Kaspersky (Multiple Products) - 'klim5.sys' Local Privilege Escalation

source: https://www.securityfocus.com/bid/33561/info Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. A local attacker can exploit this issue to execute arbitrary code with...

adobealbum-overflow.txt

Exploitable issue in various Adobe products c0ntex [email protected] Scott Laurie February 2008 Vulnerable applications, tested: Adobe Photoshop Album Starter Adobe After Effects CS3 Adobe Photoshop CS3 Not Vulnerable applications, tested: Adobe Reader Adobe Flash Player This bug is related to th...

EEYE: Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops

Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops Release Date: September 20, 2007 Date Reported: June 5, 2007 Severity: High Remote Code Execution Vendor: Computer Associates CA Systems Affected: CA ARCserve Backup for Laptops and Desktops r11.5 CA ARCserve Backup for Laptops and...

Kaspersky Anti-Virus < 6.0.2.614 Multiple Vulnerabilities

The version of the Kaspersky antivirus product installed on the remote host may be affected by buffer overflow, privilege escalation, and information disclosure vulnerabilities, depending on the actual product installed. C Tenable Network Security, Inc. include"compat.inc"; if description...

Novell Client Print Provider Multiple Functions Buffer Overflow (CVE-2006-5854)

Novell NetWare is a network operating system for Microsoft Windows and Linux workstations/servers. Novell NetWare client's Spooler service nwspool.dll is included with the Novell Client for Microsoft Windows, and provides access to remote printing services via Remote Procedure Call RPC. A remote...

Tests for Nimda Worm infected HTML files

Your server appears to have been compromised by the Nimda mass mailing worm. It uses various known IIS vulnerabilities to compromise the server. Anyone visiting compromised Web servers will be prompted to download an .eml Outlook Express email file, which contains the worm as an attachment. Also,...

Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability

Trusted Digital, Trusted MObility Suite Authorization Bypass Vulnerability Affected applications Trusted Mobility Agent PC Policy Versions: All Backgroud: Trusted Mobility Suite detects, controls and centrally manages mobile devices. It also pushes security policy and disables lost or stolen...

[VulnWatch] Blank Administrator password in DELL XP Professional install

Vulnerability in DELL Windows XP Professional - default hidden Administrator account allows local Administrator access Systems: DELLtm Laptops with Windowstm; Professional Vulnerable: DELL Laptops with pre installed Microsoft Windows XP Professional SP2 Not Vulnerable: DELL Laptops with Retail...

Backdoors in AS/400 emulations allow the server to attack connected PC workstations

Backdoors in AS/400 emulations allow the server to attack connected PC workstations Summary: Nowadays, when working with legacy AS/400 applications, most people use Telnet based terminal emulation programs, for example IBM Client Access. The issue found is using these emulations in an unplanned...

Solaris 78 - kcms_configure Command-Line Buffer Overflow (1)

Solaris 78 - kcmsconfigure Command-Line Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow...

InPerson Vulnerabilities

SGI Security Advisory Title: InPerson Vulnerabilities Reference: CAN-2000-0799 Number: 20001101-01-I Date: November 20, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted...

Linux news 25.05.00

Ядро 2.3.99-pre9 Вышел новый пререлиз нестабильного ядра 2.3.99. Изменения в основном затронули MIPS платформу. Подробнее: http://www.kernel.org/ DoS в XFree 3.3.5 и больше Ошибка, благодаря которой возможно проведение DoS атаки, обнаружена в XFree 3.3.5, 3.3.6 и 4.0. Атака приводит к использован...