Cross site request forgery (csrf)

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

CVE-2010-0109

CVE-2010-0109 affects Symantec/Altiris Deployment Solution 6.9.x prior to DS 6.9 SP4. The DBManager component can crash via a crafted CreateSession or PXEManagerSignOn request, yielding a remote DoS. Exploitation potential is described as remote and network-adjacent, with impact on availability (...

CVE-2010-0109

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

CVE-2010-0109: Improper Restriction of Operations within the Bounds of a Memory Buffer

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

Design/Logic Flaw

ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite GSS before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution DS before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code,...

CVE-2015-5689

CVE-2015-5689 affects Symantec Ghost Solutions Suite and related components (Ghost Explorer Utility; DS) prior to specific HF builds. The issue is improper sign-extension before array-element accesses, enabling remote code execution, application DoS, or potential information disclosure via a craf...

CVE-2015-5689: Improper Restriction of Operations within the Bounds of a Memory Buffer

ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite GSS before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution DS before 7.6 HF4 12.0.0.7045 performs improper sign-extend operations before array-element accesses, which allows remote attackers to execute arbitrary code,...

PT-2015-7036

Name of the Vulnerable Software and Affected Versions Symantec Ghost Solutions Suite GSS versions prior to 3.0 HF2 12.0.0.8010 Symantec Deployment Solution DS versions prior to 7.6 HF4 12.0.0.7045 Description The issue is related to improper sign-extend operations before array-element accesses in...

Symantec Deployment Solution Client Service Installed

Binary data symantecdsclientservicedetect.nbin...

Symantec Deployment Solution AClient <= 6.9 Buffer Overflow

The Symantec Deployment Solution AClient installed on the remote host is version 6.9 or prior. It is, therefore, affected by a buffer overflow vulnerability that is triggered when handling an IOCTL. A local attacker can exploit this to gain elevated privileges. C Tenable Network Security, Inc...

CVE-2014-7286

Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors...

Buffer overflow

Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors...

CVE-2014-7286

CVE-2014-7286 concerns a buffer overflow in the AClient component of Symantec Deployment Solution (6.9 and earlier) on Windows XP and Windows Server 2003. The vulnerability is triggered by handling an IOCTL, enabling a local attacker with privileges to potentially escalate to full control. ASyman...

CVE-2014-7286: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in AClient in Symantec Deployment Solution 6.9 and earlier on Windows XP and Server 2003 allows local users to gain privileges via unspecified vectors...

Symantec Deployment Solution AClient Memory Overwrite

SUMMARY An arbitrary memory overwrite vulnerability exists in a Symantec Deployment Solution agent allowing a local and authorized malicious user to potentially elevate privileges on the local system. This vulnerability applies to Windows XP SP3 or Windows Server 2003 SP2 only. AFFECTED PRODUCTS...

Altiris Deployment Solution 5.6 Client Service Local Privilege Escalation Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11709/info Altiris Deployment Solution Client allows a user to activate the client interface by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the clien...

Symantec Altiris Deployment Solution ActiveX Control Buffer Overflow

No description provided by source. $Id: symantecaltirisdeploymentruncmd.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensi...

Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute

No description provided by source. $Id: symantecaltirisdeploymentdownloadandinstall.rb 11127 2010-11-24 19:35:38Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more informati...

Symantec SQL injection exp-vulnerability warning-the black bar safety net

the msf under exp attack examples: msf use exploit/windows/misc/altirisdssqli msf Trojanaltirisdssqli show targets msf Trojanaltirisdssqli set TARGET target-id msf Trojanaltirisdssqli show options msf Trojanaltirisdssqli exploit exp attack code is as follows: This file is part of the Metasploit...

Symantec Altiris DS SQL injection

Added: 11/18/2013 CVE: CVE-2008-2286 BID: 29198 OSVDB: 45313 Background Altiris Deployment Solution DS is software for managing the configuration of machines on a network. Problem An SQL injection vulnerability allows remote attackers to execute arbitrary commands by sending a specially crafted...