idappcom - News Update | Network Security Assessment | Vulnerability Assessment | Vulnerability Scanner | Network Security Scanner | Security Assessment

Home Products Downloads News About Us My Account

idappcom News Update
30th June 2009

Traffic File Update June 2009

Traffic IQ Pro is already the most comprehensive testing and validation solution available today for network and inline devices. With its ease of use and extensive library of normal and threat traffic files the product can be used to easily create and replay simple or complex stateful testing scenarios to allow the validation of the configuration of inline network devices such as firewalls, IPS, routers, switches and other critical network systems in a controlled, repeatable and safe way.

Note: Traffic file updates are available to licensed users only.

This update includes the following traffic files:

Security Evasion Techniques

Evasion HTML javascript escape (Green Dam)
Evasion HTTP Header Folding (Green Dam)
Evasion HTTP junk headers (Green Dam)

Application Exploits

Apple QuickTime CRGN Atom Parsing Heap Buffer Overflow Vulnerability
Apple QuickTime Image Description Atom Sign Extension Vulnerability
Baofeng Storm '.smpl' Processing Buffer Overflow Vulnerability
Bopup Communication Server Remote Buffer Overflow (win_add_user)
Bopup Communication Server Remote Buffer Overflow (win_exec)
Bopup Communication Server Remote Buffer Overflow (win_shell_bind_tcp)
Bopup Communication Server Remote Buffer Overflow (win_shell_reverse_ord_tcp)
Bopup Communication Server Remote Buffer Overflow (win_shell_reverse_tcp)
Bopup Communication Server Remote Buffer Overflow Vulnerability
Bopup Communication Server Remote Buffer Overflow Vulnerability_1
HP Data Protector Express Denial of Service Vulnerability (meta)
HP Data Protector Express Denial of Service Vulnerability
HP Data Protector Express Memory Leak Vulnerability (meta)
HP Data Protector Express Memory Leak Vulnerability
HTTP Apache Tomcat Form Authentication Information Disclosure Vulnerability
HTTP Apple iPhone and iPod Touch Prior to Version 2.0 Multiple Remote Vulnerabilities
HTTP Apple iTunes Multiple URI Handler Stack Buffer Overflow Vulnerability
HTTP Apple QuickTime NULL Pointer Dereference Denial of Service
HTTP Apple Safari 'feed' URI Multiple Input Validation Vulnerabilities
HTTP Apple Safari 'parent_top' Cross Domain Scripting Vulnerability
HTTP Asmax Ar-804gu Router 'script' Remote Arbitrary Shell Command Injection Vulnerability
HTTP Cisco IOS HTTP Server HTML Injection and Cross Site Scripting Issues
HTTP cPanel 'lastvisit.html' Arbitrary File Disclosure Vulnerability
HTTP DX Studio Player Remote Arbitrary Shell Command Injection Vulnerability
HTTP Edraw PDF Viewer 'FtpDownloadFile()' Remote code execution vulnerability
HTTP Firefox and Thunderbird and SeaMonkey Multiple Browser Engine Memory Corruption
HTTP Green Dam URL and Blacklist Update Buffer Overflow (shell_bind_tcp)
HTTP Green Dam URL and Blacklist Update Buffer Overflow (win_exec)
HTTP Green Dam URL and Blacklist Update Buffer Overflow (win_shell_reverse_tcp)
HTTP Microsoft IE HTML Attribute JavaScript URI Security Bypass Vulnerability
HTTP Mozilla Firefox Large GIF File Background Denial of Service
HTTP Nagios 'statuswml.cgi' Remote Arbitrary Shell Command Injection Vulnerability
HTTP Office OCX WordViewer.OCX Word Viewer ActiveX Multiple Vulnerabilities
HTTP Opera HTML CANVAS Remote Code Execution
HTTP SAP AG SAPgui 'sapirrfc.dll' Remote Buffer Overflow Vulnerability
HTTP WebKit 'Document()' Function Remote Information Disclosure Vulnerability
HTTP WebKit JavaScript 'onload()' Event Cross Domain Scripting Vulnerability
HTTP WebKit XML External Entity Information Disclosure Vulnerability
McAfee Policy Manager 'naPolicyManager.dll' Arbitrary File Overwrite Vulnerability
Microsoft Windows Media Player ScriptCommand Hijacking 'iframes' Vulnerability
Microsoft Windows Media Player ScriptCommand Information Disclosure Vulnerability
Microsoft Windows Media Player ScriptCommand Local Media File Enumeration
SDP Downloader 'ASX' File Heap Buffer Overflow Vulnerability
SDP Downloader 'ASX' File Heap Buffer Overflow Vulnerability_1
SDP Downloader 'ASX' File Heap Buffer Overflow Vulnerability_2
Sun JRE and JDK Multiple Security Vulnerabilities (win_gen_shell_bind_tcp)
Sun JRE and JDK Multiple Security Vulnerabilities (win_gen_shell_reverse_tcp)
VLC Media Player SMB Input Module Buffer Overflow Vulnerability