5333 matches found
Symantec Workspace Virtualization 6.4.1895.0 - Kernel Mode Privilege Escalation
Symantec Workspace Virtualization 6.4.1895.0 - Kernel Mode Privilege Escalation / Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit Date: 2013-7-17 Author : MJ0011 Version: Symantec Workspace Virtualization 6.4.1895.0 Tested on: Windows XP SP3 DETAILS: In...
Symantec Workspace Virtualization 6.4.1895.0 Privilege Escalation
Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit Date: 2013-7-17 Author : MJ0011 Version: Symantec Workspace Virtualization 6.4.1895.0 Tested on: Windows XP SP3 DETAILS: In fslx.sys 's hook function of "NtQueryValueKey" , it directly write to the buffer ...
Symantec Workspace Virtualization 6.4.1895.0 - Kernel Mode Privilege Escalation
/ Symantec Workspace Virtualization 6.4.1895.0 Local Kernel Mode Privilege Escalation Exploit Date: 2013-7-17 Author : MJ0011 Version: Symantec Workspace Virtualization 6.4.1895.0 Tested on: Windows XP SP3 DETAILS: In fslx.sys 's hook function of "NtQueryValueKey" , it directly write to the buffe...
Symantec Mail Security for SMTP Autonomy KeyView Module Multiple Buffer Overflows
The remote windows host has a version of Symantec Mail Security installed that is shipped with the third-party Autonomy KeyView module, which is affected by multiple buffer overflow vulnerabilities that could allow a remote attacker to execute arbitrary code. C Tenable Network Security, Inc...
Symantec Mail Security for Exchange / Domino Autonomy KeyView Module Multiple Buffer Overflows
The remote windows host has a version of Symantec Mail Security installed that is shipped with the third-party Autonomy KeyView module, which is affected by multiple buffer overflow vulnerabilities. These issues could allow a remote attacker to execute arbitrary code. C Tenable Network Security,...
Symantec AntiVirus Scan Engine Web Service Administrative Interface Buffer Overflow
The remote host has a version of Symantec AntiVirus Scan Engine installed that is affected by a buffer overflow vulnerability in the web-based administrative interface. By sending a specially crafted request, a remote attacker may be able to execute arbitrary code. C Tenable Network Security, Inc...
CVE-2013-1613
SQL injection vulnerability in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-1614
Multiple cross-site scripting XSS vulnerabilities in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-1615
The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...
Sql injection
SQL injection vulnerability in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Design/Logic Flaw
The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...
CVE-2013-1615
The CVE affects Symantec SSIM Appliance’s management/Java console (versions 4.7.x and 4.8.x prior to 4.8.1). It allows remote attackers to obtain sensitive information via unspecified web-GUI API calls, resulting in an information disclosure vulnerability. Remediation cited in sources is upgradin...
CVE-2013-1614
Multiple cross-site scripting XSS vulnerabilities in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-1613
SQL injection vulnerability in the management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...
CVE-2013-1613
CVE-2013-1613 is a SQL injection vulnerability in the Symantec Security Information Manager (SSIM) appliance Java/management console. Affected versions are SSIM 4.7.x and 4.8.x before 4.8.1. The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Sym...
CVE-2013-1614
The CVE-2013-1614 vulnerability affects Symantec Security Information Manager (SSIM) Appliance management console (Java Console) on versions 4.7.x and 4.8.x prior to 4.8.1. The issue is multiple cross-site scripting (XSS) vulnerabilities that could allow remote attackers to inject arbitrary scrip...
CVE-2013-1615
The management console aka Java console on the Symantec Security Information Manager SSIM appliance 4.7.x and 4.8.x before 4.8.1 allows remote attackers to obtain sensitive information via unspecified web-GUI API calls...
Symantec Security Information Manager Console Security Issues
SUMMARY Symantec's Security Information Manager SSIM management console is susceptible to multiple security issues. Successful exploitation could result in potential cookie stealing, session hijacking, unauthorized disclosure of sensitive application information and potential for unauthorized...