accept no compromises

Register | Login

FilesNewsUsersAuthors

Home Files News About Contact Add New

Showing 1 - 4 of 4

Files from Dr. Peter Bieringer

kavLocalRoot.txt

Posted Aug 13, 2005

Authored by Dr. Peter Bieringer

Due to the logs directory being 777 by default, Kaspersky AntiVirus 5.5 is susceptible to a local root exploit via a symlink attack. Details are provided.

tags | exploit, local, root

MD5 | cb19145c1046533f786fc038e618534f

Download | Favorite | Comments (0)

Perl-Net-Server-log.txt

Posted Apr 24, 2005

Authored by Dr. Peter Bieringer | Site aerasec.de

The log function in Perl's Net::Server module (used by postgrey, among other tools) is vulnerable to format string attacks. However, it is not clear what the exact impact of this is in a Perl environment.

tags | advisory, perl

MD5 | 3767307653939ab1f99821507769fb63

Download | Favorite | Comments (0)

symantecAV.txt

Posted Feb 16, 2004

Authored by Dr. Peter Bieringer

The Symantec AntiVirus Scan Engine for Linux has a possible race condition via a symlink attack in /tmp.

tags | advisory

systems | linux

MD5 | 829e9866d8da713a26cee51e8b107d05

Download | Favorite | Comments (0)

decompression-bomb-vulnerability.html

Posted Feb 3, 2004

Authored by Dr. Peter Bieringer | Site aerasec.de

Research on the various reactions of anti-virus software against decompression bombs. Has a thorough comparison chart and is definately a good read.

tags | paper, virus

MD5 | 2e46ee8734eb62ab02051b6832e2d55b

Download | Favorite | Comments (0)