Real Player buffer overflow
Published:		28.10.2004
Source:		BUGTRAQ
SecurityVulns ID:		4133
Type:		client
Level:		6/10
Description:		Buffer overflow on rjs (zipped skins) file processing.

Affected:		REAL : RealPlayer 10
		REAL : RealOne Player 1
		REAL : RealPlayer 10.5

Original document

EEYE, EEYE: RealPlayer Zipped Skin File Buffer Overflow (28.10.2004)

Discuss:

Read or add your comments to this news (0 comments)

HP-UX Serviceguard privilege escalation
Published:		28.10.2004
Source:		BUGTRAQ
SecurityVulns ID:		4134
Type:		local
Level:		6/10

Affected:		HP : HP-UX 11.00
		HP : HP-UX 11.11
		HP : HP-UX 11.23
		HP : HP Serviceguard 11.15
		HP : HP Serviceguard 11.14
		HP : HP Serviceguard 11.13
		HP : HP Cluster Object Manager 03.00
		HP : HP Cluster Object Manager 02.02

Original document

HP, [security bulletin] SSRT3526 Serviceguard potential increase in privilege (28.10.2004)

Discuss:

Read or add your comments to this news (0 comments)

AppleQuickTime code execution
Published:		28.10.2004
Source:		BUGTRAQ
SecurityVulns ID:		4135
Type:		client
Level:		6/10

Affected:

APPLE : QuickTime 6.5

Original document

NGSSoftware Insight Security Research Advisory (NISR), High Risk Vulnerability in Quicktime for Windows (28.10.2004)

Discuss:

Read or add your comments to this news (0 comments)

PuTTY SSH2 buffer overflow updated since 28.10.2004
Published:		30.10.2004
Source:		BUGTRAQ
SecurityVulns ID:		4132
Type:		remote
Level:		5/10
Description:		Buffer overflow on SSH2_MSG_DEBUG packet processing.

Affected:		PUTTY : PuTTY 0.55
		TORTOISECVS : TortoiseCVS 1.8

Original document		SECUNIA, [SA13012] TortoiseCVS "SSH2_MSG_DEBUG" Packet Handling Buffer Overflow (30.10.2004)
		IDEFENSE, iDEFENSE Security Advisory 10.27.04 - PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability (28.10.2004)

Discuss:

Read or add your comments to this news (0 comments)

Multiple firewalls protection bypass updated since 28.10.2004
Published:		08.11.2005
Source:		3APA3A
SecurityVulns ID:		4136
Type:		client
Level:		5/10
Description:		The number of different way to break protection against client application attacks is almost unlimited.

Affected:		MICROSOFT : Windows XP
		WRQ : ATGuard 3.2
		CHECKPOINT : VPN-1 R55
		CHECKPOINT : Firewall-1 R55
		AGNITUM : Outpost Pro 2.1
		AGNITUM : Outpost Pro 2.5
		TINY : Tiny Firewall Pro 6.0
		ZONELABS : ZoneAlarm Pro 4.5
		ISS : BlackICE PC Protection 3.6
		KERIO : Kerio Personal Firewall 4.0
		ZONELABS : ZoneAlarm 6.0

Original document		Debasis Mohanty, Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability (08.11.2005)
		Debasis Mohanty, Bypassing Personal Firewall (Zone Alarm Pro) Using DDE-IPC (29.09.2005)
		offtopic, Bypass personal firewall application protection . Again. (09.12.2004)
		3APA3A, Presentation: Bypassing client application protection techniques with notepad (28.10.2004)

Files:		Zone Labs Products Advance Program Control and OS Firewall (Behavioral Based) Technology Bypass Vulnerability demonstration
		Bypassing client application protection techniques
Discuss:		Read or add your comments to this news (0 comments)