Symantec AntiVirus Scan Engine Web Service Administrative Interface Buffer Overflow

The remote host has a version of Symantec AntiVirus Scan Engine installed that is affected by a buffer overflow vulnerability in the web-based administrative interface. By sending a specially crafted request, a remote attacker may be able to execute arbitrary code. C Tenable Network Security, Inc...

CVE-2005-2758: Undefined Security Weakness

Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow...

CVE-2004-0217: Improper Link Resolution Before File Access

The LiveUpdate capability liveupdate.sh in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log...