5333 matches found
Symantec Backup Exec DoS
bengine.exe TCP/5633 integer overflows and NULL pointer dereference...
Symantec Backup Exec for Windows Servers Denial of Service Vulnerabilities
Backup Exec for Windows Servers, a commercial backup product from Symantec, is installed on the remote host. The version of the Backup Exec Job Engine, bengine.exe, installed as part of Backup Exec for Windows Server on the remote host contains a NULL pointer dereference error when handling...
Autonomy KeyView Lotus 1-2-3 File Multiple Buffer Overflow Vulnerabilities
Description Autonomy KeyView is prone to multiple buffer-overflow vulnerabilities. Successfully exploiting these issues could allow an attacker to execute arbitrary code in the context of the user running the application. Multiple applications incorporate the vulnerable KeyView component, so they...
Apple QuickTime 7.2/7.3 RTSP Response Universal Exploit (IE7/FF/Opera)
No description provided by source. !/usr/bin/python http://www.offensive-security.com Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Apple QuickTime Player 7.3 / 7.2 IE7,FF /Opera, XP SP2, Vista...
Apple QuickTime 7.2/7.3 RTSP Response Universal Exploit (IE7/FF/Opera)
Exploit for unknown platform in category remote exploits ====================================================================== Apple QuickTime 7.2/7.3 RTSP Response Universal Exploit IE7/FF/Opera ====================================================================== !/usr/bin/python...
Apple QuickTime 7.27.3 (Internet Explorer 7 Firefox Opera) - RTSP Response Universal
Apple QuickTime 7.27.3 Internet Explorer 7 Firefox Opera - RTSP Response Universal !/usr/bin/python http://www.offensive-security.com Bug discovered by Krystian Kloskowski h07 Tested on: Apple QuickTime Player 7.3 / 7.2 IE7,FF /Opera, XP SP2, Vista This exploit is completely "Universal" .... It h...
CVE-2004-2755
Cross-site scripting XSS vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in 1 error or 2 block page messages...
CVE-2004-2755
CVE-2004-2755 describes an XSS in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62. The vulnerability allows remote attackers to inject arbitrary script or HTML via the query string of blocked URLs shown on error or block pages. The available documents confirm the affected versions and...
Symantec AntiVirus For Macintosh Mount扫描本地特权提升漏洞
Symantec AntiVirus For Macintosh是一款苹果系统上的反病毒应用程序。 Symantec AntiVirus For Macintosh包含的Mount Scan功能存在设计错误，本地攻击者可以利用漏洞提升特权。 Symantec AntiVirus for Macintosh的Mount Scan功能使用一个可执行程序，并且Norton AntiVirus for Macintosh以ROOT访问权限运行。组管理成员可以使用恶意程序替代这个可执行程序，获得ROOT访问。 /Library/Application Support文件夹使用组属admin gid...
Stack overflow
Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted 1 A...
CVE-2007-5909
Multiple stack-based buffer overflows in Autonomy formerly Verity KeyView Viewer, Filter, and Export SDK before 9.2.0.12, as used by ActivePDF DocConverter, IBM Lotus Notes before 7.0.3, Symantec Mail Security, and other products, allow remote attackers to execute arbitrary code via a crafted 1 A...
[Full-disclosure] Local Privilege Escalation in Norton AntiVirus for Mac
Text from URL: http://blog.carrel.org/2007/11/security-advisory-norton-antivirus-for.html == Synopsis == Symantec's Norton AntiVirus for Macintosh NAV contains a vulnerability that can lead to local privilege escalation from group admin to root the super-user without any of the usual password...
Symantec Norton AntiVirus for Mac privilege escalation
External application is executed by relative path...
Design/Logic Flaw
Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380...
CVE-2007-3874
Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component pxemtftp.exe in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2007-5838
Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380...
CVE-2007-3874
Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component pxemtftp.exe in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors...
CVE-2007-5838
CVE-2007-5838 affects Symantec Altiris Deployment Solution 6.x prior to 6.8.380.0. A local privilege escalation is possible because a local user can gain SYSTEM privileges via the browser option “Enable key-based authentication to Deployment server.” The description notes this is a different issu...
CVE-2007-3874
The CVE-2007-3874 issue affects Symantec Altiris Deployment Solution 6.x PXE server’s tftp/mtftp daemon (pxemtftp.exe). A directory traversal vulnerability in the PXE server component could allow unauthenticated remote attackers to read arbitrary files on the Altiris server. Impact is read access...
CVE-2007-5838
Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380...