Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Security Advisory SYM04-013 22 September, 2004 Symantec Enterprise Firewall/VPN and Gateway Security 300 Series Appliances Multiple Issues Revision History None Risk Impact High Overview Symantec resolved three high-risk vulnerabilities that...

EUVD-2002-1446

Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers ISN, which allows remote attackers to spoof connections...

CVE-2004-1754

The DNS proxy DNSd for multiple Symantec Gateway Security products allows remote attackers to poison the DNS cache via a malicious DNS server query response that contains authoritative or additional records...

CVE-2004-0192

Cross-site scripting XSS vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page...

CVE-2004-0192

The CVE-2004-0192 entry concerns a Cross-site scripting (XSS) vulnerability in the Management Service of Symantec Gateway Security 2.0. The issue arises when a /sgmi URL contains malicious script that is not quoted in the resulting error page, enabling an attacker to steal cookies and hijack a ma...

CVE-2004-0192

Cross-site scripting XSS vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page...

Symantec Gateway Security crossite scripting

Crossite scripting in web managment...

[Full-Disclosure] Symantec Gateway Security Management Service Cross Site Scripting

Symantec Gateway Security Management Service Cross Site Scripting Product: Symantec Gateway Security 2.0 Date: 02/25/2004 Author: Brian Soby, Raytheon 1. Overview ---------------------------------------- A cross site scripting vulnerability exists in Symantec Gateway Security's management service...

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting

Symantec Gateway Security 5400 Series 2.0 - Error Page Cross-Site Scripting source: https://www.securityfocus.com/bid/9755/info A vulnerability has been reported to exist in the Symantec Gateway Security Web based management console that may allow a remote user to launch cross-site scripting...

Avirt Gateway 4.2 remote buffer overflow: proof of concept

Avirt Gateway 4.2 remote buffer overflow: proof of concept Release Date: February 12, 2002 Systems tested: Avirt Gateway v4.2 build 4807 on Windows 2000, SP2 These products can be found at vendor Avirt's web site: http://www.avirt.com Description: The telnet proxy of the Avirt Gateway v4.2 is...

Softek MailMarshal 4 Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass

Softek MailMarshal 4 Trend Micro ScanMail 1.0 - SMTP Attachment Protection Bypass source: https://www.securityfocus.com/bid/3097/info At least two SMTP gateway products have been identified which contain flaws in the handling of restricted filetypes as attachments. An attacker can insert extraneo...