idappcom - News Update | Network Security Assessment | Vulnerability Assessment | Vulnerability Scanner | Network Security Scanner | Security Assessment

Home Products Downloads News About Us My Account

idappcom News Update
31st May 2009

Traffic File Update May 2009

Traffic IQ Pro is already the most comprehensive testing and validation solution available today for network and inline devices. With its ease of use and extensive library of normal and threat traffic files the product can be used to easily create and replay simple or complex stateful testing scenarios to allow the validation of the configuration of inline network devices such as firewalls, IPS, routers, switches and other critical network systems in a controlled, repeatable and safe way.

Note: Traffic file updates are available to licensed users only.

This update includes the following traffic files:

Security Evasion Techniques

Evasion HTML base64 (Autodesk 'IDrop.ocx' Heap Memory Corruption)
Evasion HTML javascript escape (AOL Radio 'ConvertFile()' Buffer Overflow)
Evasion HTTP chunked (Autodesk 'IDrop.ocx' Heap Memory Corruption)
Evasion HTTP Header Folding (Autodesk 'IDrop.ocx' Heap Memory Corruption)
Evasion HTTP junk headers (AOL Radio 'ConvertFile()' Buffer Overflow)

Application Exploits

Adobe Acrobat Stack Exhaustion Denial of Service Vulnerability
HTTP AOL Radio AmpX 'ConvertFile()' Buffer Overflow Vulnerability (win_exec)
HTTP AOL Radio AmpX 'ConvertFile()' Buffer Overflow Vulnerability (win_shell_bind_tcp)
HTTP AOL Radio AmpX 'ConvertFile()' Buffer Overflow Vulnerability
HTTP Autodesk 'IDrop.ocx' Multiple Heap Memory Corruption (win_exec)
HTTP Autodesk 'IDrop.ocx' Multiple Heap Memory Corruption (win_shell_reverse_tcp)
HTTP Autodesk 'IDrop.ocx' Multiple Heap Memory Corruption Vulnerabilities
HTTP BaoFeng Storm 'OnBeforeVideoDownload()' Buffer Overflow Vulnerability
HTTP BaoFeng Storm 'SetAttributeValue()' Buffer Overflow Vulnerability
HTTP Chinagames 'CreateChinagames()' Buffer Overflow Vulnerability
HTTP Cisco Subscriber Edge Services Manager Cross Site Scripting
HTTP Cisco Subscriber Edge Services Manager Cross Site Scripting_1
HTTP Google Chrome 'throw()' function Null Pointer Dereference Vulnerability
HTTP Kingsoft Webshield Cross Site scripting and Remote Command Execution Vulnerability
HTTP Linksys WVC54GCA Wireless-G Cross Site Scripting Vulnerability
HTTP Linksys WVC54GCA Wireless-G Information Disclosure Vulnerability
HTTP Linksys WVC54GCA Wireless-G Information Disclosure Vulnerability_1
HTTP Microsoft Internet Explorer Unprintable Characters Denial of Service
HTTP Mozilla Firefox 'keygen' HTML Tag Denial of Service Vulnerability
HTTP Mozilla Firefox 'nsTextFrame ClearTextRun()' Remote Memory Corruption
HTTP Mozilla Firefox Loop Denial of Service Vulnerability
HTTP Profense Web Application Firewall Security Bypass Vulnerability
HTTP Roxio CinePlayer SonicDVDDashVRNav.DLL Buffer Overflow Vulnerability
HTTP SAP cFolders 'col_table_filter.htm' Cross Site Scripting Vulnerability
HTTP SAP cFolders 'me_ov.htm' Cross Site Scripting Vulnerability
HTTP Sun Java System Communications Express 'UWCMain' Cross Site Scripting
HTTP Symantec WinFax Pro 'DCCFAXVW.DLL' Heap Buffer Overflow Vulnerability
IBM Lotus Sametime Community Services Multiplexer Buffer Overflow (add_user)
IBM Lotus Sametime Community Services Multiplexer Buffer Overflow (win_exec)
Microchip MPLAB IDE '.mcp' File Handling Remote Buffer Overflow Vulnerability
Microchip MPLAB IDE 'CAT_FILTERS' Buffer Overflow Vulnerability
Microchip MPLAB IDE 'FILE_INFO' Buffer Overflow Vulnerability
Microsoft .Net Framework Multiple Null Byte Injection Vulnerabilities
Microsoft IIS Unicode Requests to WebDAV Authentication Bypass Multiple Vulnerabilities
Microsoft IIS Unicode Requests to WebDAV Authentication Bypass Multiple Vulnerabilities_1
RealNetworks RealPlayer MP3 File Handling Remote Denial of Service
Recover Data for Novell Netware '.SAV' File Remote Denial of Service
Sun Java Runtime Environment Remote Buffer Overflow Vulnerability
Symantec Multiple Products Intel Common Base Agent Remote Command Execution
Symantec Norton Ghost 'EasySetupInt.dll' Remote Denial of Service
Winamp MAKI Parsing Integer Overflow Vulnerability (adduser)
Winamp MAKI Parsing Integer Overflow Vulnerability (bind_shell)
Winamp MAKI Parsing Integer Overflow Vulnerability (calc)
Winamp MAKI Parsing Integer Overflow Vulnerability
Winamp MAKI Parsing Integer Overflow Vulnerability_1