Brightmail Control Center Default Password (symantec) for 'admin' Account

The remote host is running Symantec's Brightmail Control Center, a web-based administration tool for Brightmail AntiSpam. The installation of Brightmail Control Center on the remote host still has an account 'admin' with the default password 'symantec'. An attacker can exploit this issue to gain...

Symantec Brightmail Antispam DoS

CPU exhaustion on deeply neted archives, crash on TNEF messages processing...

Symantec Brightmail AntiSpam Denial of Service Vulnerabilities

Secunia Advisory: SA16733 Release Date: 2005-09-07 Critical: Moderately critical Impact: DoS Where: From remote Solution Status: Vendor Patch Software: Symantec Brightmail AntiSpam 6.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description:...

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness

Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness ================================================================== Product: ======== Astaro Security Linux 6.0 is a network security solution, including a combination of the following security applications: - Stateful inspection...

SpamAssassin and Vipul's Razor antispam filters DoS

CPU exhaustion on malcrafted e-mail headers...

CVE-2005-1867

Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges...

CVE-2005-1867

Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges...

CVE-2005-1867

The CVE-2005-1867 entry affects Symantec Brightmail AntiSpam prior to version 6.0.2 , where a hard-coded database administrator password enables remote attackers to gain privileges. This is described with an admin-privilege escalation risk and a high base score (CVSS v2: 7.5, NETWORK, LOW access ...

[SA15562] Symantec Brightmail AntiSpam Static Database Password

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Symantec Brightmail AntiSpam database unauthorized access

Static built-in password is used to access database...

CVE-2004-1939

CVE-2004-1939 affects Zaep AntiSpam 2.0. The vulnerability is a cross-site scripting (XSS) flaw in the key parameter, exploitable via double-encoded slashes (%252F). The NVD metrics show a base score of 4.3 (medium) with network attack vector, no confidentiality impact, partial integrity impact, ...

CVE-2004-1939

Cross-site scripting XSS vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes %252F in the key parameter...

CVE-2004-1768

Symantec Brightmail AntiSpam 6.0.1 (before patch 132) is affected by a denial-of-service in the Spamhunter and Language ID character converters when processing messages using ISO-8859-10. The converters crash due to an unrecognized character set. Affected component: character converters in Spamhu...

HashCash antispam token generation utility format tring bug

From: e-mail message header format string bug...

[SA13593] Symantec Brightmail AntiSpam Notifier Denial of Service

TITLE: Symantec Brightmail AntiSpam Notifier Denial of Service SECUNIA ADVISORY ID: SA13593 VERIFY ADVISORY: http://secunia.com/advisories/13593/ CRITICAL: Not critical IMPACT: DoS WHERE: From remote SOFTWARE: Symantec Brightmail AntiSpam 6.x http://secunia.com/product/3656/ DESCRIPTION: A weakne...

Symantec Brightmail AntiSpam DoS

Large number of quarantined spam messages causes notifier service to crash...

CVE-2004-0445

The CVE-2004-0445 issue affects Symantec Symantec Norton Internet Security/Professional (2002–2004), Norton Personal Firewall (2002–2004), Norton AntiSpam 2004, and corporate products Client Firewall 5.01/5.1.1 and Client Security 1.0–2.0, via the SYMDNS.SYS DNS/NBNS processing driver. A speciall...

[Full-Disclosure] Zaep AntiSpam Cross Site Scripting

Zaep AntiSpam Cross Site Scripting ------------------------------------------------------------------------ Article reference: http://www.securiteam.com/windowsntfocus/5EP0I15CKK.html SUMMARY Beyond Security has discovered a security vulnerability in http://www.zaep.com/ Zaep AntiSpam 2.0, the...

CVE-2004-0363

Stack-based buffer overflow in the SymSpamHelper ActiveX component symspam.dll in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method...

CVE-2004-1939

Cross-site scripting XSS vulnerability in Zaep AntiSpam 2.0 allows remote attackers to inject arbitrary web script or HTML via double encoded slashes %252F in the key parameter...