Symantec AntiVirus - symtdi.sys Local Privilege Escalation

Symantec AntiVirus - symtdi.sys Local Privilege Escalation Symantec AntiVirus symtdi.sys Local Privilege Escalation Author: Zohiartze Herce Site: http://48bits.com https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/4178.rar 07122007-symTDIadvisory.rar milw0rm.com...

Symantec AntiVirus Engine CAB Parsing Heap Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with affected installations of Symantec's AntiVirus Engine. User interaction is not required to exploit this vulnerability. The specific flaw exists during the process of scanning multiple maliciously formatted CAB...

iDefense Security Advisory 07.11.07: Symantec Backup Exec RPC Remote Heap Overflow Vulnerability

Symantec Backup Exec RPC Remote Heap Overflow Vulnerability iDefense Security Advisory 07.11.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jul 11, 2007 I. BACKGROUND Symantec Backup Exec is a data recovery solution. It provides backup services and includes agents that provide protecti...

Symantec AntiVirus symtdi.sys Local Privilege Escalation Exploit

Exploit for cgi platform in category local exploits ================================================================ Symantec AntiVirus symtdi.sys Local Privilege Escalation Exploit ================================================================ back: http://inj3ct0r.com/sploits/478.rar 0day.tod...

Symantec Client Security Internet E-mail Auto-Protect Stack Overflow

SUMMARY A stack overflow in Symantec Anti-Virus Corporate Editions Internet Email Auto-Protect feature could potentially crash the Internet Email scanning feature. Severity Low Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes Exploit publicly available | No AFFECTED...

Symantec AntiVirus Corporate Edition Local Elevation of Privilege

SUMMARY A notification window displayed by Symantecs Real-Time protection service could be exploited by a local user to gain elevated privileges on the local system. Risk Impact Medium Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No AFFECTED...

Symantec SYMTDI.SYS Device Driver Local Elevation of Privilege

SUMMARY Some versions of Symantecs device driver SYMTDI.SYS contain a vulnerability which, if successfully exploited, could allow a local attacker to execute arbitrary code with system level privileges. Risk Impact Medium Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes...

Symantec AntiVirus Malformed RAR and CAB Compression Type Bypass

SUMMARY Two vulnerabilities have been identified in the Symantec Decomposer component used to decompose some types of archive content while scanning for malicious content. Risk Impact High Remote Access | Yes ---|--- Local Access | No Authentication Required | No Exploit publicly available | No...

Symantec AntiVirus Malformed CAB and RAR Compression Remote Vulnerabilities

Description Symantec AntiVirus products that include the Symantec Decomposer are prone to multiple remote vulnerabilities related to the handling of CAB and RAR archives. These issues include a denial-of-service vulnerability and a buffer-overflow vulnerability. Successfully exploiting these issu...

KLA10350 Vulnerabilities in Symantec

Unspecified vulnerabilities were found in Symantec AntiVirus. By exploiting these vulnerabilities malicious users can execute arbitrary code or cause denial of service. This vulnerability can be exploited remotely via specially designed CAB or RAR archives. Original advisories Symantec bulletin...

Symantec Backup Exec contains heap overflow in RPC interface

Overview Symantec Backup Exec for Windows Servers contains a vulnerability that may allow a remote attacker to cause a denial of service or potentially execute arbitrary code on an affected system. Description Symantec Backup Exec for Windows Servers is a client/server based backup software...

Buffer overflow

Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function...

Design/Logic Flaw

Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions...

CVE-2007-3665

Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions...

CVE-2007-3666

Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function...

CVE-2007-3666

Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect function...

CVE-2007-3666

CVE-2007-3666 refers to a buffer overflow in RemoteCommand.DLL of Symantec Norton Ghost 12.0. The vulnerability is triggered via the Connect function, allowing remote code execution. The available connected documents confirm the affected component and the root cause (buffer overflow) but do not p...

CVE-2007-3665

Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via unspecified vectors involving the UpdateCatalog and other functions...

CVE-2007-3665

Technical details for CVE-2007-3665 are not publicly provided in the supplied documents; no affected products, versions, or remediation details are specified. Monitor for updates.

Symantec Mail Security for SMTP libdayzero.dll Executable Parsing DoS

Symantec Mail Security for SMTP, which provides antispam and antivirus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host contains boundary errors in its detection of executable packers in...