Symantec Enterprise Security Manager/Agent Privilege Escalation Vulnerability

This host is installed with Symantec Enterprise Security Manager/Agent and is prone to local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecesmprivescvuln.nasl 6079 2017-05-08 09:03:33Z teissa $ Symantec Enterprise Security Manager/Agent Privilege Escalation...

Symantec Enterprise Security Manager/Agent Privilege Escalation Vulnerability

Symantec Enterprise Security Manager/Agent is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2012-4350

Multiple unquoted Windows search path vulnerabilities in the 1 Manager and 2 Agent components in Symantec Enterprise Security Manager ESM before 11.0 allow local users to gain privileges via unspecified vectors...

CVE-2012-4350

Symantec Enterprise Security Manager (ESM) for Windows is affected by CVE-2012-4350 due to an unquoted search path in both the Manager and Agent components, enabling local privilege escalation. Public sources (OpenVAS/Nessus entries) confirm the issue affects Windows and provide remediation: upgr...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Symantec Network Access Control SNAC 12.1 before RU2 allows local users to gain privileges via unspecified vectors...

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...

Microsoft Windows Search Remote Code Execution Vulnerability (959349)

This host is missing a critical security update according to Microsoft Bulletin MS08-075. OpenVAS Vulnerability Test $Id: gbms08-075.nasl 5934 2017-04-11 12:28:28Z antu123 $ Microsoft Windows Search Remote Code Execution Vulnerability 959349 Authors: Madhuri D Copyright: Copyright c 2010 Greenbon...

CVE-2009-2761

Unquoted Windows search path vulnerability in the scheduler sched.exe in Avira AntiVir, AntiVir Premium, Premium Security Suite, and AntiVir Professional might allow local users to gain privileges via a malicious antivir.exe file in the "C:\Program Files\avira" directory...

CVE-2009-0239

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

Cross site scripting

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

CVE-2009-0239

Cross-site scripting XSS vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Sear...

CVE-2009-0239

CVE-2009-0239 is a Windows Search 4.0 information-disclosure vulnerability affecting Windows XP SP2/SP3 and Windows Server 2003 SP2. The flaw arises from an unfiltered HTML/embedded content rendering when Previewing or loading a crafted file in Windows Search results, allowing a remote attacker t...

Microsoft Windows Search information leak

Crossite scripting on search results...

MS09-023: Vulnerability in Windows Search Could Allow Information Disclosure (963093)

The remote Windows host contains a version of Windows Search that has a flaw in the way it uses MSHTML a.k.a. Trident to render HTML content that could result in information disclosure. If an attacker can trick a user on the affected host into putting a specially crafted HTML file on the system o...

Microsoft Security Bulletin MS09-023 - Moderate Vulnerability in Windows Search Could Allow Information Disclosure (963093)

Microsoft Security Bulletin MS09-023 - Moderate Vulnerability in Windows Search Could Allow Information Disclosure 963093 Published: June 9, 2009 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Windows Search. The vulnerabilit...

Microsoft Windows Search Script Injection Vulnerability

Description Microsoft Windows Search is prone to a script-injection vulnerability because it fails to adequately sanitize user-supplied input when previewing search results. Successful exploits will cause malicious script code to run in the local context, allowing attackers to steal potentially...

Windows search-ms protocol handler command execution vulnerability

Added: 12/11/2008 CVE: CVE-2008-4269 BID: 32652 OSVDB: 50566 Background The search-ms protocol allows applications to query the Windows Search index. Problem A vulnerability in Windows allows command execution when a user follows a specially crafted search-ms URL which passes arbitrary arguments ...

Code injection

The Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not properly free memory during a save operation for a Windows Search file, which allows remote attackers to execute arbitrary code via a crafted saved-search file, aka "Windows Saved Search Vulnerability."...

CVE-2008-4269

CVE-2008-4269 describes a remote code execution vulnerability in the Windows Search parsing workflow. The issue lies in the search-ms protocol handler used by Windows Explorer on Windows Vista (Gold/SP1) and Windows Server 2008, where untrusted parameter data is produced by incorrect parsing and ...

Microsoft Security Bulletin MS08-075 – Critical Vulnerabilities in Windows Search Could Allow Remote Code Execution (959349)

Microsoft Security Bulletin MS08-075 – Critical Vulnerabilities in Windows Search Could Allow Remote Code Execution 959349 Published: December 9, 2008 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Windows Search. These...