5333 matches found
CVE-2006-1286
Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, might allow local users to read certain sensitive information from the database...
CVE-2006-1285
SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, gives read and write permissions to all users for database shared memory sections, which allows local users to access and possibly modify certain information...
CVE-2006-1284
The CVE-2006-1284 entry concerns a default administrator login/password left during installation of SQLAnywhere in Symantec Ghost 8.0/8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0. This local-privilege issue could let a local user gain privileges or modify tasks. Technical context fro...
CVE-2006-1284
The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, includes a default administrator login account and password, which allows local users to gain privileges or modify tasks...
CVE-2006-1286
Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite SGSS 1.0, might allow local users to read certain sensitive information from the database...
CVE-2006-1285
The CVE-2006-1285 issue affects Symantec Ghost 8.0/8.2 (as used in Symantec Ghost Solutions Suite 1.0). The root cause is a memory-mapping permission problem in the database shared memory, causing read/write access for all users and enabling potential local access to data. Affected component: SQL...
CVE-2006-1286
The CVE covers a local buffer overflow in the login dialog (dbisqlc.exe) of SQL Anywhere used with Symantec Ghost 8.0/8.2 (SGSS 1.0). Root cause: improper handling in the login dialog could allow a local user to read sensitive data from the database. Impact per sources: potential unauthorized inf...
Symantec Security Advisory SYM06-004
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Security Advisory SYM06-004 17 March 2006 Veritas Backup Exec: Application Memory Denial of Service Revision History None Severity Medium Remote Access - Yes Local Access - No Authentication Required -No Exploit publicly available - No Overvi...
SYMSA-2006-001: Buffer overflow in Microsoft Office 2000, Office XP (2002), and Office 2003 Routing Slip Metadata
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Professional Services www.symantec.com Security Advisory Advisory ID : SYMSA-2006-001 Advisory Name: Buffer overflow in Microsoft Office 2000, Office XP 2002, and Office 2003 Routing Slip Metadata. Release Date : 03-14-2006 Application :...
[SA19171] Symantec Ghost Multiple Vulnerabilities
TITLE: Symantec Ghost Multiple Vulnerabilities SECUNIA ADVISORY ID: SA19171 VERIFY ADVISORY: http://secunia.com/advisories/19171/ CRITICAL: Less critical IMPACT: Manipulation of data, Exposure of sensitive information, Privilege escalation WHERE: Local system SOFTWARE: Symantec Ghost 8.x...
Multiple Symantec Ghost security vulnerabilities
Default username/password for application and Sybase database engine. dbisqlc.exe Shatter attacks...
Symantec Ghost: Local access vulnerabilities in Database
SUMMARY Symantec engineers updated the db component to address three local access vulnerabilities discovered in the database installed with Symantec Ghost and the Central Management Console in Symantec Ghost Solutions Suite SGSS 1.0. Exploitation of any of these issues requires physical access to...
Symantec Sygate Secure SQL injection
SQL injection in administration console...
[SA18689] Symantec Sygate Management Server SQL Injection
TITLE: Symantec Sygate Management Server SQL Injection SECUNIA ADVISORY ID: SA18689 VERIFY ADVISORY: http://secunia.com/advisories/18689/ CRITICAL: Moderately critical IMPACT: Security Bypass, Manipulation of data WHERE: From local network SOFTWARE: Sygate Secure Enterprise 3.x...
CVE-2006-0522
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server SMS version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL...
Sql injection
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server SMS version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL...
CVE-2006-0522
CVE-2006-0522 describes a SQL injection in Symantec’s Sygate Management Server (SMS) Authentication Servlet. The vulnerability affects SMS version 4.1, build 1417 and earlier, and could let a remote attacker inject SQL via a URL to bypass authentication and potentially overwrite the password for ...
CVE-2006-0522
SQL injection vulnerability in the Authentication Servlet in Symantec Sygate Management Server SMS version 4.1 build 1417 and earlier allows remote attackers to execute arbitrary SQL commands and bypass authentication via unknown attack vectors related to a URL...
CVE-2005-4695
Technical details about CVE-2005-4695 are not publicly available in the provided connected documents. The initial description remains the only explicit detail. Monitor for updates from official advisories for affected products, impact, and fixes.