Symantec Enterprise Security Manager曲解信息拒绝服务漏洞

Symantec Enterprise Security Manager ESM可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 Symantec Enterprise Security Manager在接收到部分网络扫描时存在问题，远程攻击者可以利用漏洞对应用程序进行拒绝服务攻击，导致使用100%CPU利用率。 目前没有详细漏洞细节提供。 Symantec Enterprise Security Manager 6.5.3 厂商解决方案 可参考如下安全公告获得补丁信息：...

Code injection

The agent remote upgrade interface in Symantec Enterprise Security Manager ESM before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol...

CVE-2007-2375

The agent remote upgrade interface in Symantec Enterprise Security Manager ESM before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol...

Symantec Enterprise Security Manager远程升级远程代码执行漏洞

Symantec Enterprise Security Manager ESM可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 Symantec Enterprise Security Manager存在设计问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 问题存在于ESM代理端的远程升级接口中，ESM代理端接收从熟悉升级协议的任意实体上的升级请求，并没有对源头进行任何可信认证。熟悉代理端协议的攻击者可以以应用程序进程权限执行任意指令。ESM代理端一般以管理员权限执行。 Symantec Enterprise Security...

Preemptive Protection against McAfee HTTP Server Buffer Overflow Vulnerability

McAfee ePolicy Orchestrator provides proactive defense against malicious threats and attacks. McAfee ProtectionPilot is a centralized system security manager designed specifically for businesses with up to 500 systems.A vulnerability has been reported in McAfee ePolicy Orchestrator and in McAfee...

Symantec Enterprise Security Manager拒绝服务漏洞

Symantec Enterprise Security Manager（ESM）可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 如果能够模拟为ESM代理向管理器服务器发送特制的请求的话，就会导致ESM管理器和代理都锁定，必须重启才能恢复正常运行。 Symantec Enterprise Security Manager 6.5.2 Symantec Enterprise Security Manager 6.5.1 Symantec Enterprise Security Manager 6.5 Symantec Enterprise...

Solaris 2.5.1 (i386) : 104555-02

The remote host is missing Sun Security Patch number 104555-02 Solstice Security Manager SSM 4.3: sundry patch. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended...

Solaris 2.5.1 (sparc) : 104518-02

The remote host is missing Sun Security Patch number 104518-02 Solstice Security Manager SSM 4.3: sundry patch. Date this patch was last updated by Sun : Mon Jun 09 18:00:00 MDT 1997 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

DoS против Symantec Enterprise Security Manager

Malcrafted request can be used to lockup server and agent...

Juniper NetScreen-Security Manager Remote DoS flaw

The version of Juniper NetScreen-Security Manager NSM installed on the remote host may allow an attacker to deny service to legitimate users using specially-crafted long strings to the guiSrv and devSrv processes. A watchdog service included in Juniper NSM, though, automatically restarts the...

Juniper NetScreen Security Manager (NSM) guiSrv/devSrv Crafted String Remote DoS

The version of Juniper NetScreen-Security Manager NSM installed on the remote host may allow an attacker to deny service to legitimate users using specially crafted long strings to the guiSrv and devSrv processes. A watchdog service included in Juniper NSM, though, automatically restarts the...

CVE-2005-4587

Juniper NetScreen-Security Manager NSM 2004 FP2 and FP3 allow remote attackers to cause a denial of service crash or hang of server components that are automatically restarted via a long crafted string on 1 port 7800 the GUI Server port or 2 port 7801 the Device Server port...

CVE-2005-4587

Summary: CVE-2005-4587 affects Juniper NetScreen-Security Manager (NSM) 2004 FP2 and FP3. An attacker can remotely cause a denial of service by sending long crafted strings to the GUI Server port (7800) or the Device Server port (7801). The issue triggers a crash or hang of server components that...

CVE-2005-4587

Juniper NetScreen-Security Manager NSM 2004 FP2 and FP3 allow remote attackers to cause a denial of service crash or hang of server components that are automatically restarted via a long crafted string on 1 port 7800 the GUI Server port or 2 port 7801 the Device Server port...

Mozilla/Firefox security manager certificate handling DoS

The remote host is using Mozilla, an alternative web browser. The Mozilla Personal Security Manager PSM contains a flaw that may permit an attacker to import silently a certificate into the PSM certificate store. This corruption may result in a deny of SSL connections. SPDX-FileCopyrightText: 200...

FreeBSD : mozilla -- privilege escalation via DOM property overrides (f650d5b8-ae62-11d9-a788-0001020eed82)

A Mozilla Foundation Security Advisory reports : mozbugra4 reported several exploits giving an attacker the ability to install malicious code or steal data, requiring only that the user do commonplace actions like click on a link or open the context menu. The common cause in each case was...

FreeBSD : mozilla -- 'Wrapped' javascript: urls bypass security checks (a81746a1-c2c7-11d9-89f7-02061b08fc24)

A Mozilla Foundation Security Advisory reports : Some security checks intended to prevent script injection were incorrect and could be bypassed by wrapping a javascript: url in the view-source : pseudo-protocol. Michael Krax demonstrated that a variant of his favicon exploit could still execute...

mozilla security update

CentOS Errata and Security Advisory CESA-2005:384 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2005-April/073779.html https://lists.centos.org/pipermail/centos-announce/2005-April/073780.html...

RHEL 2.1 / 3 : Mozilla (RHSA-2005:384)

Updated Mozilla packages that fix various security bugs are now available. This update has been rated as having Important security impact by the Red Hat Security Response Team. Mozilla is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor. Several bu...

[SA15102] NetIQ Security Manager Directory Traversal Security Bypass

---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: NetIQ Security Manager Directory Traversal Security...