EUVD-2008-0650

Malware in sbrugna...

EUVD-2018-10095

Malware in sbrugna...

CVE-2016-6590

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec...

CVE-2016-6590: Improper Privilege Management

A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec...

PT-2020-8047

Name of the Vulnerable Software and Affected Versions: Symantec IT Management Suite versions 7.6 through 7.6 before HF7 Symantec IT Management Suite versions 8.0 through 8.0 before HF4 Symantec Ghost Solution Suite versions 3.1 through 3.1 before MP4 Symantec Endpoint Virtualization versions 7.x...

Design/Logic Flaw

Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...

CVE-2018-18364

Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...

CVE-2018-18364: Untrusted Search Path

Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...

PT-2019-9580

Name of the Vulnerable Software and Affected Versions Symantec Ghost Solution Suite versions prior to 3.3 RU1 Description The issue is related to a DLL hijacking vulnerability, where an attacker may attempt to execute unexpected code by placing a foreign DLL file and running it via a linked...

Symantec Ghost Solution Suite Backup File Handling Memory Corruption (SYM12-016)

The Symantec Ghost Solution Suite install on the remote Windows host is earlier than build 11.5.1.2620. As such, it is potentially affected by a memory corruption vulnerability when parsing specially crafted '.gho' files. By exploiting this flaw, a remote attacker could execute arbitrary code on...

CVE-2012-0306: Improper Restriction of Operations within the Bounds of a Memory Buffer

Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted backup file...

PT-2012-2482

Name of the Vulnerable Software and Affected Versions Symantec Ghost Solution Suite versions 2.x through 2.5.1 Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption. This can be achieved by using a crafted backup file...

CVE-2008-0640

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing...

Design/Logic Flaw

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing...

CVE-2008-0640: Improper Authentication

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing...

Symantec Ghost Solution Locate Server Detection

The remote host is running the 'locate' service of Symantec Ghost solution, an OS deployment and management solution. This service is used by clients to discover management servers or to test if the main server is alive. C Tenable Network Security, Inc. include"compat.inc"; if description...

CVE-2007-3132

Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service client or server crash via malformed requests to the daemon port, 1346/udp or 1347/udp...

Design/Logic Flaw

Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service client or server crash via malformed requests to the daemon port, 1346/udp or 1347/udp...

CVE-2007-3132

Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service client or server crash via malformed requests to the daemon port, 1346/udp or 1347/udp...

CVE-2007-3132: Undefined Security Weakness

Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service client or server crash via malformed requests to the daemon port, 1346/udp or 1347/udp...