Authentication flaw

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

CVE-2016-2245

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

CVE-2016-2245: Improper Authentication

HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...

PT-2016-5078

Name of the Vulnerable Software and Affected Versions HP Support Assistant versions prior to 8.1.52.1 Description The issue allows remote attackers to bypass authentication. Recommendations For versions prior to 8.1.52.1, update to version 8.1.52.1 or later to resolve the issue...

HPSBGN03438 rev.2 - HP Support Assistant, Local Authentication Bypass

Potential Security Impact Authentication Bypass Source: Hewlett­Packard Company, HP Software Security Response Team VULNERABILITY SUMMARY A potential security vulnerability has been identified in HP Support Assistant. This vulnerability could be exploited locally to allow authentication bypass...

VMware vCenter Support Assistant Multiple Vulnerabilities (VMSA-2014-0006)

The version of VMware vCenter Support Assistant installed on the remote host is 5.5.1.x prior to 5.5.1.1. It is, therefore, affected by multiple vulnerabilities in the bundled OpenSSL library : - An error exists in the function 'ssl3readbytes' that could allow data to be injected into other...

CVE-2006-6490

The CVE-2006-6490 issue affects Symantec/Norton consumer products that ship the SupportSoft ActiveX controls SmartIssue tgctlsi.dll and ScriptRunner tgctlsr.dll. The vulnerability is described as multiple stack/heap buffer overflows in these ActiveX controls, which could allow remote code executi...

CVE-2006-6490: Undefined Security Weakness

Multiple buffer overflows in the SupportSoft 1 SmartIssue tgctlsi.dll and 2 ScriptRunner tgctlsr.dll ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HT...

Symantec自动支持助手ActiveX控件缓冲区溢出漏洞

Symantec自动支持助手是很多Symantec产品中所捆绑的ActiveX控件，用于识别Symantec用户产品中的问题。 Symantec自动支持助手ActiveX控件没有正确地验证外部输入，可能导致栈溢出并以运行浏览器用户的权限执行任意指令。 成功的攻击要求攻击者能够伪装成为可信任的Web站点并诱骗用户点击恶意的链接。 Symantec Norton AntiVirus 2006 Symantec Norton AntiVirus 2005 Symantec Norton Internet Security 2006 Symantec Norton Internet Securi...

CVE-2006-5404: Undefined Security Weakness

Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors...

CVE-2006-5403: Undefined Security Weakness

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via...