Kaspersky (Multiple Products) - 'klim5.sys' Local Privilege Escalation

source: https://www.securityfocus.com/bid/33561/info Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. A local attacker can exploit this issue to execute arbitrary code with...

Kaspersky (Multiple Products) - klim5.sys Local Privilege Escalation

Kaspersky Multiple Products - klim5.sys Local Privilege Escalation source: https://www.securityfocus.com/bid/33561/info Multiple Kaspersky products are prone to a local privilege-escalation vulnerability because the applications fail to perform adequate boundary checks on user-supplied data. A...

adobealbum-overflow.txt

Exploitable issue in various Adobe products c0ntex [email protected] Scott Laurie February 2008 Vulnerable applications, tested: Adobe Photoshop Album Starter Adobe After Effects CS3 Adobe Photoshop CS3 Not Vulnerable applications, tested: Adobe Reader Adobe Flash Player This bug is related to th...

EEYE: Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops

Multiple Vulnerabilities in CA ARCserve for Laptops & Desktops Release Date: September 20, 2007 Date Reported: June 5, 2007 Severity: High Remote Code Execution Vendor: Computer Associates CA Systems Affected: CA ARCserve Backup for Laptops and Desktops r11.5 CA ARCserve Backup for Laptops and...

Kaspersky Anti-Virus < 6.0.2.614 Multiple Vulnerabilities

The version of the Kaspersky antivirus product installed on the remote host may be affected by buffer overflow, privilege escalation, and information disclosure vulnerabilities, depending on the actual product installed. C Tenable Network Security, Inc. include"compat.inc"; if description...

Novell Client Print Provider Multiple Functions Buffer Overflow (CVE-2006-5854)

Novell NetWare is a network operating system for Microsoft Windows and Linux workstations/servers. Novell NetWare client's Spooler service nwspool.dll is included with the Novell Client for Microsoft Windows, and provides access to remote printing services via Remote Procedure Call RPC. A remote...

Tests for Nimda Worm infected HTML files

Your server appears to have been compromised by the Nimda mass mailing worm. It uses various known IIS vulnerabilities to compromise the server. Anyone visiting compromised Web servers will be prompted to download an .eml Outlook Express email file, which contains the worm as an attachment. Also,...

Trusted Digital, Trusted Mobility Suite Authorization Bypass Vulnerability

Trusted Digital, Trusted MObility Suite Authorization Bypass Vulnerability Affected applications Trusted Mobility Agent PC Policy Versions: All Backgroud: Trusted Mobility Suite detects, controls and centrally manages mobile devices. It also pushes security policy and disables lost or stolen...

[VulnWatch] Blank Administrator password in DELL XP Professional install

Vulnerability in DELL Windows XP Professional - default hidden Administrator account allows local Administrator access Systems: DELLtm Laptops with Windowstm; Professional Vulnerable: DELL Laptops with pre installed Microsoft Windows XP Professional SP2 Not Vulnerable: DELL Laptops with Retail...

CVE-2002-1645: Undefined Security Weakness

Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL...

CVE-2002-1644: Undefined Security Weakness

SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges...

Backdoors in AS/400 emulations allow the server to attack connected PC workstations

Backdoors in AS/400 emulations allow the server to attack connected PC workstations Summary: Nowadays, when working with legacy AS/400 applications, most people use Telnet based terminal emulation programs, for example IBM Client Access. The issue found is using these emulations in an unplanned...

Solaris 78 - kcms_configure Command-Line Buffer Overflow (1)

Solaris 78 - kcmsconfigure Command-Line Buffer Overflow 1 // source: https://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow...

InPerson Vulnerabilities

SGI Security Advisory Title: InPerson Vulnerabilities Reference: CAN-2000-0799 Number: 20001101-01-I Date: November 20, 2000 SGI provides this information freely to the SGI user community for its consideration, interpretation, implementation and use. SGI recommends that this information be acted...

Linux news 25.05.00

Ядро 2.3.99-pre9 Вышел новый пререлиз нестабильного ядра 2.3.99. Изменения в основном затронули MIPS платформу. Подробнее: http://www.kernel.org/ DoS в XFree 3.3.5 и больше Ошибка, благодаря которой возможно проведение DoS атаки, обнаружена в XFree 3.3.5, 3.3.6 и 4.0. Атака приводит к использован...