Symantec AntiVirus Scan Engine Web Interface Multiple Remote Vulnerabilities

The remote host appears to be running Symantec Scan Engine. This version of Scan Engine is vulnerable to several flaws that could allow a remote attacker to take control of the scan engine. The following flaws are present: - Fixed HTTPS certificate key - Configuration file retrieval with...

Multiple Symantec Scan Engine network content filtering server security vulnerabilities

Administrative interface passwords are checked on client side, fixed encryption key is used, critical information leak...

Rapid7 Advisory R7-0023: Symantec Scan Engine File Disclosure Vulnerability

Rapid7, LLC Security Advisory Rapid7 Advisory R7-0023 Symantec Scan Engine File Disclosure Vulnerability Published: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0023.html CVE: CVE-2006-0232 1. Affected systems: KNOWN VULNERABLE: o Symantec Scan Engine v5.0.0.24 KNOWN FIXED: o...

Rapid7 Advisory R7-0022: Symantec Scan Engine Known Immutable DSA Private Key

Rapid7, LLC Security Advisory Rapid7 Advisory R7-0022 Symantec Scan Engine Known Immutable DSA Private Key Published: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0022.html CVE: CVE-2006-0231 1. Affected systems: KNOWN VULNERABLE: o Symantec Scan Engine v5.0.0.24 KNOWN FIXED: ...

Rapid7 Advisory R7-0021: Symantec Scan Engine Authentication Fundamental Design Error

Rapid7, LLC Security Advisory Rapid7 Advisory R7-0021 Symantec Scan Engine Authentication Fundamental Design Error Published: April 21, 2006 Revision: 1.0 http://www.rapid7.com/advisories/R7-0021.html CVE: CVE-2006-0230 1. Affected systems: KNOWN VULNERABLE: o Symantec Scan Engine v5.0.0.24 KNOWN...

[Symantec Security Advisor] Symantec Scan Engine Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Title: Symantec Scan Engine Multiple Vulnerabilities Threat: Moderate Impact: Unauthorized access Product: Symantec Scan Engine Situation Overview: Three vulnerabilities have been discovered in the Symantec Scan Engine. Symantec Scan Engine is a...

Symantec Scan Engine Multiple Vulnerabilities

SUMMARY Three vulnerabilities have been discovered in the Symantec Scan Engine. Symantec Scan Engine is a TCP/IP server and programming interface that enables third parties to incorporate support for Symantec content scanning technologies into their proprietary applications. This gateway-level...

Symantec Scan Engine 5.0.x - Change Admin Password

Symantec Scan Engine 5.0.x - Change Admin Password !/usr/bin/perl -w Remotely change the administrator password or password hash of Symantec Scan Engine. Author: Marc Bevand of Rapid7 Copyright 2006 Rapid7, LLC. All rights reserved. Redistribution and use in source and binary forms, with or witho...

Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit

No description provided by source. !/usr/bin/perl -w Remotely change the administrator password or password hash of Symantec Scan Engine. Author: Marc Bevand of Rapid7 marcbevandatrapid7.com Copyright 2006 Rapid7, LLC. All rights reserved. Redistribution and use in source and binary forms, with o...

Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit

Exploit for cgi platform in category remote exploits ================================================================= Symantec Scan Engine 5.0.x.x Change Admin Password Remote Exploit ================================================================= !/usr/bin/perl -w Remotely change the...

Symantec Scan Engine 5.0.x - Change Admin Password

!/usr/bin/perl -w Remotely change the administrator password or password hash of Symantec Scan Engine. Author: Marc Bevand of Rapid7 Copyright 2006 Rapid7, LLC. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the...

CVE-2006-0951

The GUI nod32.exe in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors...

Code injection

The GUI nod32.exe in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors...

CVE-2006-0951

The GUI nod32.exe in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors...

CVE-2006-0951

The CVE-2006-0951 entry concerns the NOD32 2.5 GUI (nod32.exe). The vulnerability arises because during a scheduled on-demand scan, the GUI runs with SYSTEM privileges, enabling local users to execute arbitrary code via unspecified attack vectors. Affected component: nod32.exe GUI within NOD32 2....

CVE-2006-0951: Undefined Security Weakness

The GUI nod32.exe in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors...

Have your first*NIX broiler-vulnerability warning-the black bar safety net

The copyright of all, reproduced Please note the name of the evanescent water QQ: 2 7 8 7 4 7 4 6 7 "Dear audience friends! I may want to die you Ah!" Recently has been studying theNUXas the system. Don't have much time to fuss, immediately 5 months and want to start to research, come by this...

Information about the scan

This script displays, for each tested host, information about the scan itself: - The version of the VT feed - The type of VT feed Direct, Registered or GPL - The version of the Scanner Engine - The port scanners used - The port range scanned - The date of the scan - The duration of the scan - The...

Information about the scan

This script displays, for each tested host, information about the scan itself: - The version of the NVT feed - The type of NVT feed Direct, Registered or GPL - The version of the OpenVAS Engine - The port scanners used - The port range scanned - The date of the scan - The duration of the scan - T...

PT-2006-2390 · Trend Micro · Trend Micro Officescan

Name of the Vulnerable Software and Affected Versions: Trend Micro OfficeScan versions prior to 6.5 Description: The issue allows local users to gain SYSTEM privileges by modifying the tmlisten.exe file due to insecure DACLs used for critical files. Recommendations: For versions prior to 6.5,...