ISA Server 2000 Service Pack 2 Release Notes

ISA Server 2000 Service Pack 2 Release Notes SUMMARY Microsoft Internet Security and Acceleration ISA Server 2000 Service Pack 2 SP2 includes all the hotfixes and security bulletins that are released for ISA Server 2000, including all the hotfixes and security bulletins that were released as part...

TREND MICRO: The Protector Becomes The Vector [technical exercise: cross-application-scripting]

Thursday, June 03, 2004 The following represents an interesting technical examination when the so-called "Anti-Virus" protector becomes the Virus "Vector". Naturally this is the result of relying on the "plug and play" or "module" of one Internet Explorer browser and operating system from a produ...

CVE-2004-0445

The CVE-2004-0445 issue affects Symantec Symantec Norton Internet Security/Professional (2002–2004), Norton Personal Firewall (2002–2004), Norton AntiSpam 2004, and corporate products Client Firewall 5.01/5.1.1 and Client Security 1.0–2.0, via the SYMDNS.SYS DNS/NBNS processing driver. A speciall...

CVE-2004-0444

Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of servic...

CVE-2004-0445

The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service CPU consumption...

CVE-2004-0375

The vulnerability CVE-2004-0375 affects SYMNDIS.SYS in multiple Symantec firewall/Norton products (Norton Internet Security, Norton Personal Firewall, Client Firewall 5.x, Client Security 1.x) where parsing TCP options can trigger an infinite loop and a denial of service. Specifically, sending a ...

CVE-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

EUVD-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

CVE-2004-0364

The WrapNISUM ActiveX component WrapUM.dll in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method...

Norton "WrapNISUM Class" (WrapUM.dll) ActiveX control allows remote arbitrary command execution

Overview Symantec's Norton Internet Security 2004 Professional is a software package that provides antivirus, antispam, and personal firewall applications. A vulnerability in an Symantec's Norton Internet Security 2004 suite may permit a remote attacker to execute arbitrary commands on the local...

CVE-2004-0364

The WrapNISUM ActiveX component WrapUM.dll in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method...

CVE-2004-0364

The CVE-2004-0364 vulnerability affects Norton Internet Security 2004 (WrapNISUM/WrapUM.dll ActiveX). The ActiveX control is marked safe for scripting, enabling a remote attacker to cause the browser to execute arbitrary programs via the LaunchURL method when a user visits a malicious page or HTM...

Norton Internet Security Remote Command Execution (#NISR19042004b)

NGSSoftware Insight Security Research Advisory Name: Norton Internet Security Remote Command Execution Systems Affected: XP not confirmed on 2000; NIS & NIS Pro 2004, not confirmed on previous versions. Severity: High Vendor URL: http://www.symantec.com Author: Mark Litchfield [email protected]...

EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability

Internet Security Systems PAM ICQ Server Response Processing Vulnerability Release Date: March 18, 2004 Date Reported: March 8, 2004 Severity: High Remote Code Execution Vendor: Internet Security Systems Systems Affected: RealSecure Network 7.0, XPU 22.11 and before RealSecure Server Sensor 7.0 X...

[Full-Disclosure] EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow

RealSecure/BlackICE Server Message Block SMB Processing Overflow Release Date: February 26, 2004 Date Reported: February 18, 2004 Severity: High Remote Code Execution Vendor: Internet Security Systems Software Affected: RealSecure Network 7.0, XPU 20.15 through 22.9 Real Secure Server Sensor 7.0...

Internet Security Systems' BlackICE and RealSecure contain a heap overflow in the processing of SMB packets

Overview Internet Security Systems' BlackICE and RealSecure intrusion detection products contain a remotely exploitable vulnerability. Exploitation of this vulnerability could lead to the compromise of the system with privileges of the vulnerable process, typically the "SYSTEM" user. Description...

CVE-2003-0819

Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...

CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain...

security flaw

The rawprint function in the ISAKMP decoding routines print-isakmp.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service segmentation fault via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than...

CVE-2003-0819

Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...