Searching skip software vulnerabilities

Trend Micro InterScan VirusWall HTTP proxy 3.6

Content-length | VirusWall | InterScan | malicious | scanning | enabled | servers | ignored | content | clients | bypass | header | allows | equals | option | Micro | often | which | "Skip | Trend | proxy | HTTP | web | via | set |

Trend Micro InterScan VirusWall HTTP proxy 3.6 with the "Skip scanning if Content-length equals 0" option enabled allows malicious web servers to bypass content scanning via a Content-length header set to 0, which is often ignored by HTTP clients.


Computer Associates eTrust Antivirus EE 6.0 thr

password-protected | Associates | attackers | including | protected | Antivirus | scanning | password | Computer | through | causes | eTrust | bypass | remote | allows | which | other | virus | files | skip | file | scan | only | ZIP |

Computer Associates eTrust Antivirus EE 6.0 through 7.0 allows remote attackers to bypass virus scanning by including a password-protected file in a ZIP file, which causes eTrust to scan only the password protected file and skip the other files.


The libarchive library in FreeBSD 6-STABLE afte

context-dependent | 2006-11-08 | 2006-09-05 | libarchive | attackers | 6-STABLE | FreeBSD | library | service | denial | before | allows | after | cause |

The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service (CPU consumption) via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop that attempts to read more data.


Argument injection vulnerability in the telnet

vulnerability | injection | Argument | daemon | telnet |

Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account.


CRLF injection vulnerability in the mail functi

vulnerability | injection | function | mail | CRLF | PHP |

CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbitrary e-mail headers and possibly conduct spam attacks via a control character immediately following folding of the (1) Subject or (2) To parameter, as demonstrated by a parameter containing a "\r\n\t\n" sequence, related to an increment bug in the SKIP_LONG_HEADER_SEP macro.


Software vulnerabilities results 1 to 6 of 6     
Page: 1