Symantec Sygate Personal Firewall ActiveX Buffer Overflow Vulnerability

This host is installed with Symantec Sygate Personal Firewall and is prone to Buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodsymantecsygatepersonalfirewallbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Symantec Sygate Personal Firewall ActiveX Buffer Overflow Vulnerability...

Symantec Sygate Personal Firewall ActiveX Buffer Overflow Vulnerability

Symantec Sygate Personal Firewall is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2305

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method...

Buffer overflow

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method...

CVE-2010-2305

The CVE-2010-2305 issue affects Symantec Sygate Personal Firewall 5.6 (build 2808). A flaw exists in the SSHelper.dll ActiveX control where a buffer overflow is triggered by passing a long third argument to the SetRegString method, allowing remote code execution. The vulnerability is tied to an A...

Sygate Personal Firewall 5.6 Build 2808 Active-X Exploit

seh = unescape"%13%16%47%06" 'ADD ESP,46C RETN rop = rop + String72, "D" 'J...

Sygate Personal Firewall 5.6 build 2808 - ActiveX with DEP Bypass

Sygate Personal Firewall 5.6 build 2808 - ActiveX with DEP Bypass !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | |...

Sygate Personal Firewall 5.6 build 2808 - ActiveX with DEP Bypass

!-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

CVE-2002-2397

The CVE-2002-2397 entry concerns Sygate Personal Firewall 5.0, where a remote attacker could bypass firewall filters by spoofing the source IP to 127.0.0.1 or the 127.0.0.0 network. The connected records reiterate the same description (product/version and bypass via spoofed loopback addresses) bu...

CVE-2002-2397

Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed 1 source IP address of 127.0.0.1 or 2 network address of 127.0.0.0...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 is affected. The flaw arises from relying on the Process Environment Block (PEB) to identify a process, allowing local attackers to bypass product controls by spoofing the PEB fields (ImagePathName, CommandLine, and WindowTitle). The connected documents confirm t...

CVE-2006-4981

Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that 1 permits all non-Windows devices or 2 whitelists certain sets of Organizationally Unique Identifiers OUIs...

CVE-2006-4981

CVE-2006-4981 affects Symantec Sygate NAC. The vulnerability allows physically proximate attackers to bypass access controls and join a local network by selecting a forged MAC address that matches an exception rule: (1) permitting all non-Windows devices or (2) whitelisting specific OUIs. The NVD...

CVE-2006-4981

Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that 1 permits all non-Windows devices or 2 whitelists certain sets of Organizationally Unique Identifiers OUIs...

Update Protection against Symantec Sygate Management Server SQL Injection Vulnerability

A vulnerability was identified in Symantec's Sygate Management Server SMS. A remote attacker could supply code into a URL which would allow the attacker to overwrite the password for any SMS account. Successful exploitation would allow the attacker to access any SMS console with the account's...

Symantec Sygate Management Server - LOGIN SQL Injection (Metasploit)

Symantec Sygate Management Server - LOGIN SQL Injection Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core...

Symantec Sygate Management Server (login) SQL Injection Exploit

Exploit for cgi platform in category web applications =============================================================== Symantec Sygate Management Server login SQL Injection Exploit =============================================================== This file is part of the Metasploit Framework and may...

Symantec Sygate Management Server (login) SQL Injection Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...