5333 matches found
Symantec ConsoleUtilities ActiveX Control Buffer Overflow
No description provided by source. $Id: symantecconsoleutilitiesbrowseandsavefile.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...
Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow
No description provided by source. $Id: symantecaltirisdeploymentruncmd.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...
IceWarp Universal WebMail /mail/index.html lang_settings Parameter Remote File Inclusion
No description provided by source. source: http://www.securityfocus.com/bid/16069/info IceWarp Universal WebMail is prone to multiple input-validation vulnerabilities. Deerfield VisNetic Mail Server and Merak Mail Server integrate IceWarp Universal WebMail into their suites. An attacker can explo...
Symantec Messaging Gateway 9.5/9.5.1 SSH Default Password Security Bypass Vulnerability
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Symantec Web Gateway 5.0.2 (blocked.php id parameter) Blind SQL Injection
No description provided by source. !/usr/bin/python Exploit Title: Symantec Web Gateway 5.0.2 blocked.php id parameter Blind SQL Injection Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.2 Vendor URL: http://www.symantec.com Timeline: 29 May 2012: Vulnerability reported to CERT 3...
Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers
No description provided by source. Exploit Title: Symantec Web Gateway 5.0.3.18 Blind SQLi Backdoor via MySQL Triggers Date: Jul 23 2012 Author: muts Version: Symantec Web Gateway 5.0.3.18 Vendor URL: http://www.symantec.com Timeline: 12 Jun 2012: Vulnerability reported to CERT 22 Jun 2012:...
Apple Safari 3 for Windows Document.Location Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/24499/info Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input. An attacker may exploit this issue by enticing victims into opening a maliciously...
eXtremail 1.x/2.1 - Remote Format String Vulnerability (2)
No description provided by source. source: http://www.securityfocus.com/bid/2908/info eXtremail is a freeware SMTP server available for Linux and AIX. eXtremail contains a format-string vulnerability in its logging mechanism. Attackers can send SMTP commands argumented with maliciously constructe...
Symantec Enterprise Firewall 7.0/8.0 DNSD DNS Cache Poisoning Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10557/info It is reported that dnsd is prone to a cache poisoning vulnerability. Dnsd does not ensure that the data returned from a remote DNS server contains related information about the requested records. An attacker...
Symantec Web Gateway 5.0.2.8 ipchange.php Command Injection
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Symantec Web Gateway 5.1.0.x - Multiple Vulnerabilities
No description provided by source...
Symantec Web Gateway 5.0.3.18 LFI Remote ROOT RCE Exploit
No description provided by source. !/usr/bin/python ''' The original patch for the Symantec Web Gateway 5.0.2 LFI vulnerability removed the /tmp/networkScript file but left the entry in /etc/sudoers, allowing us to simply recreate the file and obtain a root shell using a different LFI...
Symantec Endpoint Protection Manager 12.1.x - SEH Overflow POC
No description provided by source. Exploit-DB mirror: http://www.exploit-db.com/sploits/33056-sepm-secars-poc-v0.3.tar.gz !/usr/bin/perl -w Exploit Title: Symantec Endpoint Protection Manager 12.1.x - SEH Overflow POC Date: 31 January 2013 Exploit Author: [email protected] a.k.a...
Symantec Messaging Gateway 9.5.3-3 Arbitrary File Download
No description provided by source. ======= Summary ======= Name: Symantec Messaging Gateway - Arbitrary file download is possible with a crafted URL authenticated Release Date: 30 November 2012 Reference: NGS00266 Discoverer: Ben Williams [email protected] Vendor: Symantec Vendor...
Symantec Norton Internet Security 2003 ICMP Packet Flood DoS
No description provided by source. source: http://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive approximately 65500 or more number of ICMP packet...
Symantec End Point Protection 11.x & Symantec Network Access Control 11.x LCE PoC
No description provided by source. Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP SP2 English Windows XP SP3 English Windows Vista 32Bit Windows 7...
Symantec Client Firewall Products 5 SYMNDIS.SYS Driver Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9912/info Symantec Client Firewall has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself in the TCP packet processing routines of the affected software. It is...
Symantec Web Gateway <= 5.0.3.18 Arbitrary Password Change
No description provided by source. !/usr/bin/python import urllib import urllib2 import re import sys print print Symantec Web Gateway = 5.0.3.18 Arbitrary Password Change print @Kc57 print \n if lensys.argv != 4: print Usage: poc.py RHOST username newpassword exit0 ip = sys.argv1 username =...
Symantec Multiple Products Client Proxy ActiveX (CLIproxy.dll) Remote Overflow
No description provided by source. source: http://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote...
Symantec Backup Exec System Recovery Manager 7.0 FileUpload Class Unauthorized File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27487/info Symantec Backup Exec System Recovery Manager is prone to a vulnerability that allows arbitrary unauthorized files to be uploaded to any location on the affected server. This issue resides in the Symantec...