idappcom - News Update | Network Security Assessment | Vulnerability Assessment | Vulnerability Scanner | Network Security Scanner | Security Assessment

Home Products Downloads News About Us My Account

idappcom News Update
30th April 2009

Traffic File Update April 2009

Traffic IQ Pro is already the most comprehensive testing and validation solution available today for network and inline devices. With its ease of use and extensive library of normal and threat traffic files the product can be used to easily create and replay simple or complex stateful testing scenarios to allow the validation of the configuration of inline network devices such as firewalls, IPS, routers, switches and other critical network systems in a controlled, repeatable and safe way.

Note: Traffic file updates are available to licensed users only.

This update includes the following traffic files:

Security Evasion Techniques

Evasion HTML base64 (random_space_injection) (for CVE-2007-4475)
Evasion HTML javascript escape (for CVE-2007-2919)
Evasion HTML unicode (utf-16le) (for CVE-2007-4475)
Evasion HTTP chunked (for CVE-2007-2919)
Evasion HTTP Header Folding (for CVE-2007-2919)
Evasion HTTP junk headers (for CVE-2007-2919)

Application Exploits

Abee Chm Maker Project File 'chmprj' Processing Remote Code Execution
Abee Chm Maker Project File 'cmp' Processing Remote Code Execution
HTTP Apache Geronimo Application Server Directory Traversal Vulnerability
HTTP Apache Geronimo Application Server Directory Traversal Vulnerability_1
HTTP Apache mod_perl 'Apache Status' and 'Apache2 Status' Cross Site Scripting
HTTP Apple Safari XML Parser Nested XML Tag Remote Denial of Service
HTTP DiViS-Web DVR System 'AddSiteEx()' Buffer Overflow Vulnerability
HTTP E-Book Systems FlipViewer Remote Buffer Overflow (win_exec)
HTTP E-Book Systems FlipViewer Remote Buffer Overflow (win_shell_bind_tcp)
HTTP IBM BladeCenter Advanced Management Module Cross-Site Request Forgery
HTTP IBM BladeCenter Advanced Management Module Cross-Site Scripting
HTTP IBM BladeCenter Advanced Management Module Information Disclosure Vulnerability
HTTP IBM Tivoli Continuous Data Protection for Files Cross Site Scripting
HTTP IBM WebSphere Application Server Administrative Console Cross Site Scripting
HTTP IBM WebSphere Application Server Administrative Console Cross Site Scripting_1
HTTP IBM WebSphere Application Server Sample Application Cross Site Scripting
HTTP IBM WebSphere JAX-WS Web Services MTOM Sample XSS vulnerability
HTTP IBM WebSphere JAX-WS Web Services Ping and Echo Sample XSS Vulnerability
HTTP Microsoft Internet Explorer 'EMBED' Tag Remote Code Execution (MS09-014)
HTTP Mozilla Firefox XUL Parser Start Tags Denial of Service Vulnerability
HTTP Mozilla Firefox _moveToEdgeShift() Memory Corruption Vulnerability
HTTP Opera XML Parser Remote Denial of Service Vulnerability
HTTP PrecisionID Data Matrix Barcode Arbitrary File Overwrite Vulnerability
HTTP SAP AG SAPgui EAI WebViewer3D Remote Buffer Overflow (win_exec)
HTTP SAP AG SAPgui EAI WebViewer3D Remote Buffer Overflow (win_shell_bind_tcp)
HTTP SAP AG SAPgui EAI WebViewer3D Remote Buffer Overflow (win_shell_reverse_tcp)
HTTP SAP Business Objects Crystal Reports 'viewreport.asp' Cross Site Scripting
HTTP SAP MaxDB 'webdbm' Cross Site Scripting Vulnerability
HTTP SAP MaxDB 'webdbm' Cross Site Scripting Vulnerability_1
HTTP SAP MaxDB 'webdbm' Cross Site Scripting Vulnerability_2
HTTP Sun Java System Calendar Server 'command.shtml' Cross Site Scripting
HTTP Sun Java System Calendar Server 'login.wcap' Cross Site Scripting
HTTP Sun Java System Calendar Server Duplicate URI Request Denial of Service
HTTP SWF Opener Buffer Overflow Vulnerability
IBM DB2 Data Stream Processing Denial of Service
Microsoft Windows Media Player MIDI File Denial of Service Vulnerability
Microsoft Windows Media Player MIDI File Denial of Service Vulnerability_1
Microsoft Windows Media Player WAV File Multiple DoS Vulnerabilities
Microsoft Windows Media Player WAV File Multiple DoS Vulnerabilities_1
Microsoft Windows Media Player WAV File Multiple DoS Vulnerabilities_2
Microsoft Word Bulleted List Handling Memory Corruption Vulnerability (MS09-010)
Microsoft Word Bulleted List Handling Memory Corruption Vulnerability (MS09-010)_1
Microsoft Word Bulleted List Handling Memory Corruption Vulnerability (MS09-010)_2
Microsoft Word Bulleted List Handling Memory Corruption Vulnerability (MS09-010)_3
UltraISO '.ui' ISO Project File Buffer Overflow Vulnerability
UltraISO CCD File Buffer Overflow Vulnerability
UltraISO IMG File Buffer Overflow Vulnerability
Unsniff Network Analyzer '.usnf' File Heap-Based Buffer Overflow