Symantec Gateway Security crossite scripting

Crossite scripting in web managment...

[Full-Disclosure] Symantec Gateway Security Management Service Cross Site Scripting

Symantec Gateway Security Management Service Cross Site Scripting Product: Symantec Gateway Security 2.0 Date: 02/25/2004 Author: Brian Soby, Raytheon 1. Overview ---------------------------------------- A cross site scripting vulnerability exists in Symantec Gateway Security's management service...

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting...

[Full-Disclosure] Possible race condition in Symantec AntiVirus Scan Engine for Red Hat Linux during LiveUpdate

Hi, during evaluation of Symantec AntiVirus Scan Engine for Red Hat Linux file: ScanEngine430-RedHat-1.zip we found a race condition using default configuration. Like written in "ImplementationGuide.pdf" on page 134 LiveUpdate can be triggered by cron via a shell script:...

Symantec AntiVirus Scan Engine for Red Hat Linux symbolic links problem

Symbolic links problem during LiveUpdate logging...

CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain...

KLA10355 LPE vulnerability in Symantec

An unspecified vulnerability was found in Symantec products. By exploiting this vulnerability malicious users can gain system privileges. This vulnerability can be exploited locally via an unknown vector. Original advisories Symantec advisory Related products Symantec-Windows-LiveUpdate...

SRT2004-01-9-1022 - Symantec LiveUpdate allows local users to become SYSTEM

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact kfatsecnetops.com Spam Contact rm -rf /@snosoft.com Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS,...

CVE-2003-0936

Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe...

CVE-2003-0936

Symantec PCAnywhere 10.x and 11 are affected when running as a Windows service. The vulnerability lies in the GUI help interface, which can be manipulated via AWHOST32.exe to give a non-privileged user SYSTEM privileges on the local host. Exploitation is local and tied to service-mode operation; ...

CVE-2003-0936

Symantec PCAnywhere 10.x and 11, when started as a service, allows attackers to gain SYSTEM privileges via the help interface using AWHOST32.exe...

SRT2003-11-13-0218 - PCAnywhere local SYSTEM exploit

Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...

Symantec pcAnywhere privelege escalation

It's possible to obtains system account privileges via help...

RE: Secure Network Operations SRT2003-11-13-0218, PCAnywhere allows local users to become SYSTEM

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Security Response Advisory 13 November 2003 Symantec pcAnywhere Service-Mode Help File Elevation of Privilege Risk Impact High very dependent on product configuration and operating environment Overview Security analysts from Secure Network...

CVE-2003-1149

Cross-site scripting XSS vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page...

Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting

Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting source: https://www.securityfocus.com/bid/8904/info It has been reported that Symantec Norton Internet Security is prone to a cross-site scripting vulnerability. The issue is reported to exist when the software...

Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting

source: https://www.securityfocus.com/bid/8904/info It has been reported that Symantec Norton Internet Security is prone to a cross-site scripting vulnerability. The issue is reported to exist when the software blocks a restricted website and an error message containing the requested URL is...

Microsoft Windows XP20002003 - Message Queuing Service Heap Overflow

Microsoft Windows XP20002003 - Message Queuing Service Heap Overflow source: https://www.securityfocus.com/bid/8783/info It has been reported that the Microsoft Message Queuing service is prone to a heap overflow. The Symantec DeepSight analyst team is currently analyzing proof-of-concept exploit...

CVE-2003-0470

Buffer overflow in the "RuFSI Utility Class" ActiveX control aka "RuFSI Registry Information Class", as used for the Symantec Security Check service, allows remote attackers to execute arbitrary code via a long argument to CompareVersionStrings...

Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite

Symantec Norton AntiVirus 20022003 - Device Driver Memory Overwrite source: https://www.securityfocus.com/bid/8329/info It has been reported that a memory corruption vulnerability affects the Symantec Norton AntiVirus Device Driver. According to the report, one of the device control operation...