CVE-2003-0994

The GUI functionality for an interactive session in Symantec LiveUpdate 1.70.x through 1.90.x, as used in Norton Internet Security 2001 through 2004, SystemWorks 2001 through 2004, and AntiVirus and Norton AntiVirus Pro 2001 through 2004, AntiVirus for Handhelds v3.0, allows local users to gain...

security flaw

The rawprint function in the ISAKMP decoding routines print-isakmp.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service segmentation fault via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than...

CVE-2003-0819

Buffer overflow in the H.323 filter of Microsoft Internet Security and Acceleration Server 2000 allows remote attackers to execute arbitrary code in the Microsoft Firewall Service via certain H.323 traffic, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol...

CVE-2003-0819

CVE-2003-0819 is a buffer-overflow vulnerability in the H.323 filter of Microsoft ISA Server 2000 that could allow remote code execution in the Microsoft Firewall Service via crafted H.323 traffic. OpenVAS entries corroborate a remote-code-execution risk; affected product is ISA Server 2000 (Gold...

Microsoft Security Bulletin MS04-001

Microsoft Security Bulletin MS04-001 Vulnerability in Microsoft Internet Security and Acceleration Server 2000 H.323 Filter Could Allow Remote Code Execution 816458 Issued: January 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Internet Security and...

Norton Internet Security crossite scripting

In URL blocking message URL is not escaped...

Norton Internet Security 2003 XSS

DigitalPranksters Security Advisory http://www.DigitalPranksters.com Norton Internet Security Blocked Sites XSS Risk: Low Product: Norton Internet Security 2003 v6.0.4.34 Maybe others we only tested this version Product URL: http://www.symantec.com/sabu/nis/nispe/index.html Found By: KrazySnake -...

CVE-2003-1149

Cross-site scripting XSS vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page...

Symantec Norton Internet Security 2003 6.0.4.34 - Error Message Cross-Site Scripting

source: https://www.securityfocus.com/bid/8904/info It has been reported that Symantec Norton Internet Security is prone to a cross-site scripting vulnerability. The issue is reported to exist when the software blocks a restricted website and an error message containing the requested URL is...

RAV ActiveX Buffer overflow in ravupdt.dll file

RAV Online Scanning ActiveX Buffer Overflow in RAVUPDT.DLL ================================================= PROGRAM: RAV ONLINE SCANNING ACTIVEX HOMEPAGE: www.ravantivirus.com VULNERABLE VERSIONS: Online Version Only DESCRIPTION ================================================= RAV Online Scanni...

WebLogic Crafted GET Request Hostname Disclosure

The remote WebLogic server discloses its NetBIOS host name when it is issued a request generating a redirection. An attacker may use this information to better prepare other attacks against this host. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

iDEFENSE Security Advisory 04.09.03: Denial of Service in Microsoft Proxy Server and Internet Security and Acceleration (ISA) S

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDEFENSE Security Advisory 04.09.03: http://www.idefense.com/advisory/04.09.03.txt Denial of Service in Microsoft Proxy Server 2.0 and Internet Security and Acceleration Server 2000 April 9, 2003 I. BACKGROUND Microsoft Corp.'s Internet Security and...

CVE-2002-0663

Technical details about CVE-2002-0663 are not publicly provided in the supplied documents. No affected products, root cause, or remediation specifics are available here. Monitor for updates.

Re: NIS 2003 crash

On January 11, 2003 Pavel P. reported the following regarding Norton Internet Security 2003: ---------------snip-------------------------- Subject: NIS 2003 crash NIS2003 - I have WinXP Pro with SP1 and Norton Internet Security installed on my machine. When I ping my machine with the following...

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service source: https://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive...

Symantec Norton Internet Security 2003 - ICMP Packet Flood Denial of Service

source: https://www.securityfocus.com/bid/6598/info Symantec Norton Internet Security 2003 is reported to be prone to a denial of service condition. It is possible to trigger this condition by sending an excessive approximately 65500 or more number of ICMP packets to a host running Norton Interne...

CVE-2002-1695

Norton Internet Security 2001 opens log files with FILESHAREREAD and FILESHAREWRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running...

Microsoft Security Bulletin MS02-068: Cumulative Patch for Internet Explorer (324929)

-----BEGIN PGP SIGNED MESSAGE----- - ---------------------------------------------------------------------- Title: Cumulative Patch for Internet Explorer 324929 Released: 04 December 2002 Revised: 06 December 2002 version 2.0 Software: Microsoftr Internet Explorer Impact: Allow an attacker to...

Directory Manager edit_image.php Arbitrary Command Execution

Directory Manager is installed and does not properly filter user input. A remote attacker may use this flaw to execute arbitrary commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid11104; scriptversion"1.26";...

ISS Alert: Remote Denial of Service Vulnerability in ISC BIND

TO UNSUBSCRIBE: email "unsubscribe alert" in the body of your message to [email protected] Contact [email protected] for help with any problems! --------------------------------------------------------------------------- -----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Aler...