Norton "WrapNISUM Class" (WrapUM.dll) ActiveX control allows remote arbitrary command execution

Overview Symantec's Norton Internet Security 2004 Professional is a software package that provides antivirus, antispam, and personal firewall applications. A vulnerability in an Symantec's Norton Internet Security 2004 suite may permit a remote attacker to execute arbitrary commands on the local...

Norton AntiSpam contains boundary error within the "SymSpamHelper Class" (symspam.dll) ActiveX component.

Overview Symantec's Norton AntiSpam is a software package that provides spam filtering. A vulnerability in an ActiveX control that ships with Norton AntiSpam may permit a remote attacker to execute arbitrary code on the local system. Description Symantec Norton AntiSpam for Windows installs the...

[VulnWatch] Norton AntiSpam Remote Buffer Overrun (#NISR19042004a)

NGSSoftware Insight Security Research Advisory Name: Norton AntiSpam Remote Buffer Overrun Systems Affected: Windows XP not confirmed on 2000 Severity: High Vendor URL: http://www.symantec.com Author: Mark Litchfield [email protected] Date Vendor Notified: 4th March 2004 Date of Public Advisor...

Norton Internet Security Remote Command Execution (#NISR19042004b)

NGSSoftware Insight Security Research Advisory Name: Norton Internet Security Remote Command Execution Systems Affected: XP not confirmed on 2000; NIS & NIS Pro 2004, not confirmed on previous versions. Severity: High Vendor URL: http://www.symantec.com Author: Mark Litchfield [email protected]...

PT-2004-1382 · Red Hat +1 · Red Hat +1

Name of the Vulnerable Software and Affected Versions: Symantec AntiVirus Scan Engine versions 4.0 through 4.3 Description: The issue allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log. This is related to the LiveUpdate capability liveupdate.sh i...

[Full-Disclosure] Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate

Hi, during evaluation of Symantec AntiVirus Scan Engine for Red Hat Linux file: ScanEngine430-RedHat-1.zip we found a race condition using default configuration. Like written in "ImplementationGuide.pdf" on page 134 LiveUpdate can be triggered by cron via a shell script:...

Symantec AntiVirus Scan Engine for Red Hat Linux symbolic links problem

Symbolic links problem during LiveUpdate logging...

CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain...

SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...

CVE-2002-0344

Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server...

CVE-2002-0344

Symantec LiveUpdate 1.5 and earlier in Norton Antivirus stores usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server...

CVE-2002-0344

CVE-2002-0344 affects Symantec LiveUpdate 1.5 and earlier used with Norton Antivirus. The issue stems from storing usernames and passwords for a local LiveUpdate server in cleartext in the registry, which may allow remote attackers to impersonate the LiveUpdate server. The NVD entry describes thi...

CVE-2001-1125

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site...

CVE-2001-1126

Symantec LiveUpdate 1.4–1.6 (and possibly later versions) are affected. The vulnerability allows a remote attacker to cause a denial-of-service (flood) by DNS spoofing the update.symantec.com site. Impact is a partial loss of availability. The description does not provide exploit details, affecte...

CVE-2001-1125

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site...

CVE-2001-1125

CVE-2001-1125 concerns Symantec LiveUpdate prior to 1.6, where the update mechanism did not cryptographically verify downloaded files. This enables a remote attacker to achieve arbitrary code execution via DNS spoofing of the update site (update.symantec.com). The issue affects LiveUpdate version...

CVE-2001-1126

Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service flood via DNS spoofing of the update.symantec.com site...

CVE-2001-0549

The CVE describes Symantec LiveUpdate 1.5 storing proxy passwords in cleartext in the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\LiveUpdate\Preferences\Proxy), allowing local users to read credentials. CERT/CC details confirm local read access to the registry key and recommend upgrading to Li...

CVE-2001-0549

Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords...

Symantec LiveUpdate attacks

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 Authors FX [email protected] DasIch [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Affected Products Symantec LiveUpdate 1.4 Symantec LiveUpdate 1.6 Vendor communication 09/22/2001 Symantec contacted via...