CVE-2008-0640

The CVE-2008-0640 issue concerns Symantec Ghost Solution Suite versions 1.1 (before patch 2), 2.0.0, and 2.0.1, where the console and Ghost Management Agent do not authenticate the connection. This lack of authentication allows remote attackers to execute arbitrary commands via unspecified RPC re...

CVE-2008-0640: Improper Authentication

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing...

CVE-2007-5040

Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey, 2 NtCreateThread, 3 NtDeleteValueKey, 4...

CVE-2007-5039

Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey, 2 NtDeleteValueKey, 3 NtQueryValueKey, 4...

CVE-2007-5039

Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey, 2 NtDeleteValueKey, 3 NtQueryValueKey, 4...

CVE-2007-5039

CVE-2007-5039 : Ghost Security Suite beta 1.110 contains improper validation of parameters to System Service Descriptor Table (SSDT) function handlers. This allows local users to trigger a crash (DoS) and potentially gain privileges via kernel SSDT hooks for (1) NtCreateKey, (2) NtDeleteValueKey,...

CVE-2007-5040

CVE-2007-5040 affects Ghost Security Suite alpha 1.200. The issue is improper validation of certain parameters to System Service Descriptor Table (SSDT) function handlers, leading to denial of service (crash) and potential privilege elevation via kernel SSDT hooks. Affected kernel interfaces incl...

CVE-2007-5039: Improper Input Validation

Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey, 2 NtDeleteValueKey, 3 NtQueryValueKey, 4...

CVE-2007-5040: Improper Input Validation

Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table SSDT function handlers, which allows local users to cause a denial of service crash and possibly gain privileges via the 1 NtCreateKey, 2 NtCreateThread, 3 NtDeleteValueKey, 4...

[Eleytt] 7LIPIEC2007

Eleytt Research www.eleytt.com Overview/Credit: ==================== Michal Bucko www.eleytt.com/michal.bucko sapheal.hack.pl Vulnerability Table =================== 1. Firefox 2.0.0.4 Remote Denial of Service Vulnerability 2. Microsoft Register Server Remote Denial of Service Issue 3. FreeWRL...

Multiple applications security vulnerabilities

Mozilla Firefox pop-ups DoS, Microsoft Register Server DoS, FreeWRL ActiveX memory corruption, Nonnoi ASP Barcode files overwrite, Eltima Software VSPAX DoS, Media Player Classic memory corruption, Eltima Software RunService AX DoS, Symantec Norton Ghost ActiveX DoS and code execution,...

Design/Logic Flaw

Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions...

Buffer overflow

Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function...

CVE-2007-3666

Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function...

CVE-2007-3665

Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions...

CVE-2007-3666

Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function...

CVE-2007-3665

Technical details for CVE-2007-3665 are not publicly provided in the supplied documents; no affected products, versions, or remediation details are specified. Monitor for updates.

CVE-2007-3666

CVE-2007-3666 refers to a buffer overflow in RemoteCommand.DLL of Symantec Norton Ghost 12.0. The vulnerability is triggered via the Connect function, allowing remote code execution. The available connected documents confirm the affected component and the root cause (buffer overflow) but do not p...

CVE-2007-3665

Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions...

CVE-2007-3665: Undefined Security Weakness

Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions...