5333 matches found
CVE-2008-3703
The CVE-2008-3703 issue affects Symantec Veritas Storage Foundation for Windows (SFW) where the Volume Manager Scheduler Service (VxSchedService.exe) allows NULL NTLMSSP authentication, enabling remote attackers to manipulate snapshot schedules through the service socket and potentially execute a...
CVE-2008-3703
The management console in the Volume Manager Scheduler Service aka VxSchedService.exe in Symantec Veritas Storage Foundation for Windows SFW 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote attackers to execute arbitrary code via requests to the service socket that...
Symantec VERITAS Storage Foundation multiple security vulnerabilities
DoS on TCP/4888 request parsing, buffer overflow on UDP/3207 parsing...
SYM08-015_SFW_SecurityUpdateBypass
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Symantec Security Advisory SYM08-015 14 Aug, 2008 Veritas Storage Foundation for Windows Volume Manager Scheduler Service for Windows Security Update Circumvention Revision History None Severity Medium Remote Access Yes, network access required Loca...
ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability
ZDI-08-053: Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-08-053 August 14, 2008 -- Affected Vendors: Symantec -- Affected Products: Symantec Veritas Storage Foundation -- Vulnerability Detail...
Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability
This vulnerability allows an attacker to execute arbitrary code on vulnerable installations of Symantec Veritas Storage Foundation. User interaction is not required to exploit this vulnerability. Authentication is not required to exploit this vulnerability. The specific flaw exists in the...
Code injection
Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors...
CVE-2008-2794
Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors...
CVE-2008-2794
CVE-2008-2794 describes a local privilege escalation affecting the Symantec Altiris Notification Server Agent GUI. The vulnerability is tied to Altiris Notification Server Agent 6.x (before 6.0 SP3 R8) and allows local users to gain privileges via unspecified attack vectors. The connected sources...
CVE-2008-2794
Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors...
Symantec Altiris Notification Server Agent GUI Local Elevation of Privilege
SUMMARY A non-privileged user can leverage the Symantec Altiris Notification Server Agent Graphical User Interface GUI to gain privileged access to the system. Severity Medium Remote Access adjacent network | No ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No...
CVE-2008-2512
Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors...
Directory traversal
Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2008-2512
CVE-2008-2512 is a directory-traversal vulnerability in Symantec Backup Exec System Recovery Manager (BESR) (7.x before 7.0.4 and 8.x before 8.0.2). A remote, unauthenticated attacker can exploit an inadequate sanitization in the Tomcat-based servlet (reportsfile) to read arbitrary files on the a...
CVE-2008-2512
Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors...
Symantec Backup Exec System Recovery Manager Traversal Arbitrary File Access
The remote host appears to be running Symantec Backup Exec System Recovery Manager, a backup manager solution. The Tomcat servlet 'reportsfile' included in the version of Backup Exec System Recovery Manager installed on the remote host fails to properly sanitize user input to the 'filename'...
Symantec Backup Exec系统还原管理器目录遍历漏洞
BUGTRAQ ID: 29350 CVECAN ID: CVE-2008-0457 Symantec Backup Exec是一款全面的数据备份解决方案。 Symantec Backup Exec处理用户请求存在输入验证漏洞，网络攻击者可以利用此漏洞遍历目录读取特权文件或非授权访问目标系统。 Symantec Backup Exec System Recovery Manager 8.x Symantec Backup Exec System Recovery Manager 7.x Symantec -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Symantec Backup Exec for Windows Server ActiveX Control Multiple Vulnerabilities
Overview The PVATLCalendar.PVCalendar.1 pvcalendar.ocx ActiveX control, a scheduler component of the Media Server in Symantec Backup Exec for Windows Server BEWS, includes the insecure Save method that mishandles strings assigned to certain properties listed below, which can be exploited to cause...
Insomnia : ISVA-080516.1 - Altiris Deployment Solution - SQL Injection
Insomnia Security Vulnerability Advisory: ISVA-080516.1 Name: Altiris Deployment Solution - SQL Injection Released: 16 May 2008 Vendor Link: http://www.altiris.com/ Affected Products: Altiris Deployment Solution 6.8.x & 6.9.x Original Advisory:...