Symantec Veritas Storage Foundation Scheduler Service (VxSchedService.exe) Remote Code Execution

The remote host is running a version of Symantec Storage Foundation for Windows that is vulnerable to a remote scheduler service access. An attacker may exploit this flaw to modify or create scheduled commands and gain a full access to the system. To exploit this flaw, an attacker would need to...

Symantec Storage Foundation VxSchedService.EXE调度服务验证绕过漏洞

Symantec Storage Foundation是一款应用广泛的存储管理平台。 Symantec Storage Foundation包含的调度服务存在验证绕过和任意代码执行问题，远程攻击者可以利用漏洞以进程权限执行任意指令，控制目标系统。 攻击者可以直接连接调度服务套接字绕过管理控制台的内置验证程序，以应用程序进程权限执行任意指令。目前没有详细漏洞细节提供。 Symantec Foundation for Windows 5.0 可参考安全公告获得补丁信息：...

GDB 6.6 - Process_Coff_Symbol UPX File Buffer Overflow

source: https://www.securityfocus.com/bid/24291/info GDB is prone to a buffer-overflow vulnerability because it fails to properly check bounds when handling specially crafted executable files. Attackers could leverage this issue to run arbitrary code outside of a restricted environment, which may...

iDefense Security Advisory 06.01.07: Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability

Symantec VERITAS Storage Foundation Administration Service DoS Vulnerability iDefense Security Advisory 06.01.07 http://labs.idefense.com/intelligence/vulnerabilities/ June 01, 2007 I. BACKGROUND The VERITAS Storage Foundation is made up of the Veritas File System, Veritas Volume Replicator VVR...

Symantec Enterprise Security Manager远程拒绝服务漏洞

Symantec Enterprise Security Manager（ESM）可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 ESM在处理请求连接时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 如果某些网络扫描访问了ESM的网络端口的话，ESM解释某些信息可能会出现竞争条件，导致管理器和代理挂起，导致接近100%的CPU使用率。 Symantec Enterprise Security Manager 6.5.3 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Race condition

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

CVE-2007-2896

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

CVE-2007-2896

CVE-2007-2896 affects Symantec Enterprise Security Manager (ESM) 6.5.3 on Windows prior to 20070524. The issue is a race condition that allows remote attackers to cause denial of service via certain network scans directed at ESM ports, leading to CPU consumption and application hang. Descriptions...

CVE-2007-2896

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

Symantec Enterprise Security Manager曲解信息拒绝服务漏洞

Symantec Enterprise Security Manager ESM可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 Symantec Enterprise Security Manager在接收到部分网络扫描时存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，导致使用100%CPU利用率。 目前没有详细漏洞细节提供。 Symantec Enterprise Security Manager 6.5.3 厂商解决方案 可参考如下安全公告获得补丁信息：...

Symantec Enterprise Security Manager Denial-of-Service

SUMMARY Symantec Enterprise Security Manager ESM is susceptible to a race condition that can lead to a denial-of-service. Risk Impact Medium Remote Access | Yes ---|--- Local Access | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Vulnerable Products Only the...

Symantec Discovery Server Detection

Binary data 3998.prm...

Symantec Discovery Client Detection

Binary data 3997.prm...

Norton Personal Firewall ISAlertDataCOM ActiveX控件缓冲区溢出漏洞

Norton Personal Firewall是一款个人防火墙应用程序。 Norton Personal Firewall包含的ISAlertDataCOM ActiveX控件处理参数输入缺少正确边界检查，远程攻击者可以利用漏洞对应用程序进行缓冲区溢出攻击，可能以进程权限执行任意指令。 当ISLAlert.dll处理"Set"和"Get"方法时存在边界错误，提交超长参数可导致缓冲区溢出，构建恶意WEB页，诱使用户访问，可导致应用程序崩溃。 Symantec Norton Internet Security 2004 Symantec Norton Internet Security...

Symantec Norton Internet Security 2004 ActiveX Control Buffer Overflow

This module exploits a stack buffer overflow in the ISAlertDataCOM ActiveX Control ISLAert.dll provided by Symantec Norton Internet Security 2004. By sending an overly long string to the "Get" method, an attacker may be able to execute arbitrary code. This module requires Metasploit:...

Symantec Norton个人防火墙ActiveX控件远程溢出漏洞

Symantec Norton个人防火墙是非常流行的防火墙软件。 Symantec Norton的ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 Norton个人防火墙的ISLALERT.DLL库中ISAlertDataCOM函数所使用的Get和Set函数没有正确验证输入参数，如果用户受骗浏览了特制的HTML文档的话，就可能触发缓冲区溢出，导致以登录用户的权限执行任意指令。 Symantec Norton Personal Firewall 2004 Symantec Norton Internet Security 2004 临时解决方法：...

Symantec Norton Personal Firewall / Internet Security ActiveX buffer overflow

ISAlertDataCOM Set and Get methods buffer overflows...

Symantec Product Security: Norton Personal Firewall 2004 ActiveX Control vulnerability

SYM07-007 May 16, 2007 Symantec Norton Personal Firewall 2004 ActiveX Control Buffer Overflow Risk Impact Medium Affected Products Norton Internet Security 2004 Norton Personal Firewall 2004 Details CERT notified Symantec that a buffer overflow exists in an ActiveX Control used by Norton Personal...

Buffer overflow

Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...

CVE-2007-1173

Multiple buffer overflows in the CentennialIPTransferServer service XFERWAN.EXE, as used by 1 Centennial Discovery 2006 Feature Pack 1, 2 Numara Asset Manager 8.0, and 3 Symantec Discovery 6.5, allow remote attackers to execute arbitrary code via long strings in a crafted TCP packet...