Symantec Scan Engine 5.0.x - Change Admin Password

Symantec Scan Engine 5.0.x - Change Admin Password !/usr/bin/perl -w Remotely change the administrator password or password hash of Symantec Scan Engine. Author: Marc Bevand of Rapid7 Copyright 2006 Rapid7, LLC. All rights reserved. Redistribution and use in source and binary forms, with or witho...

Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit

Exploit for cgi platform in category remote exploits ================================================================= Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit ================================================================= !/usr/bin/perl -w Remotely change the...

Symantec Scan Engine 5.0.x - Change Admin Password

!/usr/bin/perl -w Remotely change the administrator password or password hash of Symantec Scan Engine. Author: Marc Bevand of Rapid7 Copyright 2006 Rapid7, LLC. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the...

Symantec AntiVirus Decomposition Buffer Overflow

SUMMARY Symantec is aware of a buffer overflow in its AntiVirus component used to decompose RAR Roshal Archive. A specially crafted RAR file could potentially cause this buffer overflow to occur and possibly execute hostile content from the RAR file on the targeted system. Risk Impact High Remote...

CA Vet Scan Engine < 11.9.1 Library Remote Heap Overflow

The remote host is running a version of CA Vet Scan Engine that is vulnerable to heap overflow. An attacker may exploit this flaw to execute arbitrary code on the remote host with the privileges of a local administrator or to disable the remote service remotely. To exploit this flaw, an attacker...

CVE-2005-2758

CVE-2005-2758 affects Symantec AntiVirus Scan Engine (administrative web interface). The vulnerability is a buffer overflow caused by insufficient validation of HTTP header input, allowing remote code execution when a crafted request is sent to the web service port (default 8004) on affected vers...

CVE-2005-2758: Undefined Security Weakness

Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow...

Vulnerability in Scan Engine Software

//-------------------------------------- // Vulnerability in Scan Engine Software // Release Date : 2005-09-15 // Version: Currents may be all priors versions // Tested on: Windows 2000 SP2 & SP4 // Tested on: Windows 2000 Server SP4 // // Discovered by: fRoGGz, maew, shadok & mogwai // Credit to...

CVE-2005-0643

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files...

CVE-2005-1346: Undefined Security Weakness

Multiple Symantec AntiVirus products, including Norton AntiVirus 2005 11.0.0, Web Security Web Security 3.0.1.72, Mail Security for SMTP 4.0.5.66, AntiVirus Scan Engine 4.3.7.27, SAV/Filter for Domino NT 3.1.1.87, and Mail Security for Exchange 4.5.4.743, when running on Windows, allows remote...

CVE-2005-0643

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files...

CVE-2005-0644

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643...

EUVD-2005-0644

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files...

CVE-2005-0643

CVE-2005-0643 (and related CVEs) describe a buffer overflow in McAfee Scan Engine 4320 when parsing LHA archives. The vulnerability is triggered by crafted LHA files; DAT versions before 4357 (CVE-2005-0643) and before 4436 (CVE-2005-0644) are affected. Exploitation can lead to remote code execut...

CVE-2005-0643: Undefined Security Weakness

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4357 allows remote attackers to execute arbitrary code via crafted LHA files...

CVE-2005-0644: Undefined Security Weakness

Buffer overflow in McAfee Scan Engine 4320 with DAT version before 4436 allows remote attackers to execute arbitrary code via a malformed LHA file with a type 2 header file name field, a variant of CVE-2005-0643...

CVE-2004-0217

CVE-2004-0217 affects Symantec AntiVirus Scan Engine on Red Hat Linux (LiveUpdate capability via liveupdate.sh) and allows local users to create or append arbitrary files by exploiting a symlink on /tmp/LiveUpdate.log. Affected versions: 4.0 and 4.3. Root cause: symlink attack in LiveUpdate.log h...

CVE-2004-0217: Improper Link Resolution Before File Access

The LiveUpdate capability liveupdate.sh in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log...