Lincoln

**Name of the Vulnerable Software and Affected Versions** Integard Pro versions prior to 2.0.0.9037 Integard Home versions prior to 2.0.0.9037 Integard Pro and Home versions 2.2.x prior to 2.2.0.9037 **Description** The web server has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. This issue can be exploited through an EIP-overwrite buffer overflow. **Recommendations** For Integard Pro and Home versions prior to 2.0.0.9037, update to version 2.0.0.9037 or later. For Integard Pro and Home versions 2.2.x prior to 2.2.0.9037, update to version 2.2.0.9037 or later. As a temporary workaround, consider restricting access to the administration login `POST` request until a patch is available. Avoid using long passwords in the administration login until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Zabbix versions 1.8.x through 1.8.17 Zabbix versions 2.0.x through 2.0.8 Zabbix versions 2.1.x through 2.1.6 **Description** The issue involves multiple SQL injection vulnerabilities. **Recommendations** For Zabbix versions 1.8.x through 1.8.17, update to version 1.8.18rc1 or later. For Zabbix versions 2.0.x through 2.0.8, update to version 2.0.9rc1 or later. For Zabbix versions 2.1.x through 2.1.6, update to version 2.1.7 or later.

**Name of the Vulnerable Software and Affected Versions** Symantec Sygate Personal Firewall version 5.6 build 2808 **Description** The issue is related to a buffer overflow in an ActiveX control in SSHelper.dll. This allows remote attackers to execute arbitrary code via a long third argument to the `SetRegString` method. **Recommendations** For Symantec Sygate Personal Firewall version 5.6 build 2808, consider disabling the `SetRegString` method in the SSHelper.dll ActiveX control as a temporary workaround until a patch is available.