CVE-2011-0552

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...

Sql injection

SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Code injection

The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue."...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...

CVE-2011-0553

SQL injection vulnerability in the management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2011-0554

Symantec IM Manager (web console) is affected by CVE-2011-0554. The vulnerability exists in the management console/web interface and stems from improper validation of HTTP parameters (rdProcess), allowing remote attackers to execute arbitrary code. Exploitation can occur via crafted requests sent...

CVE-2011-0554

The management console in Symantec IM Manager before 8.4.18 allows remote attackers to execute arbitrary code via unspecified vectors, related to a "code injection issue."...

CVE-2011-0553

The CVE-2011-0553 entry concerns Symantec IM Manager: an SQL injection in the management console (IMAdminLDAPConfig.asp) due to insufficient input validation. A remote attacker could exploit the flaw to execute arbitrary SQL on the underlying database (some sources note authentication is required...

CVE-2011-0552

CVE-2011-0552 affects Symantec IM Manager

CVE-2011-0552

Multiple cross-site scripting XSS vulnerabilities in the management console in Symantec IM Manager before 8.4.18 allow remote attackers to inject arbitrary web script or HTML via the 1 refreshRateSetting parameter to IMManager/Admin/IMAdminSystemDashboard.asp, the 2 nav or 3 menuitem parameter to...

Symantec IM Manager < 8.4.18 Multiple Vulnerabilities (SYM11-012)

Binary data 6031.prm...

Symantec IM Manager Administrator Console Multiple Issues

SUMMARY Symantec IM Manager is vulnerable to Code Injection, Cross-Site Scripting and SQL Injection. Successful exploitation of these vulnerabilities could result in injection/execution of arbitrary code in the context of the browser or the application. AFFECTED PRODUCTS Product | Version |...

Symantec Veritas Administrator Service vxsvc Buffer Overflow (CVE-2011-0547)

A code execution vulnerability has been reported in Symantec Veritas enterprise administrator service. The vulnerability is due to improper buffer allocation while parsing requests. An attacker may exploit this vulnerability by sending a specially crafted request to an affected server. Successful...

Symantec Veritas Enterprise Administrator Service (vxsvc) Multiple Integer Overflows

Binary data veritasvxsvcmultiplevulnsremote.nbin...

Symantec Veritas Enterprise Administrator Service (vxsvc) Detection

Binary data veritasvxsvcdetect.nbin...

Morto Worm Found Squirming on Chinese MMORPG Site

The Morto Worm began to make waves just three short weeks ago after working its way through Windows’ Remote Desktop Protocol RDP but now the worm appears to have an entirely new mode of transport: Jade Dynasty, a massively multiplayer online role playing game MMORPG that is popular in China...

Symantec Endpoint Protection Manager XSS and CSRF Vulnerabilities

Symantec Endpoint Protection Manager is prone to cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Symantec Veritas Backup Exec code execution

It's possible to execute privileged command remotely...

Symantec Veritas Enterprise Administrator Service (vxsvc) Multiple Integer Overflows (SYM11-010)

Symantec Veritas Enterprise Administrator Service vxsvc, a component of Veritas Storage Foundation, is installed on the remote Windows host. According to its version number, the installed version of Symantec Veritas Enterprise Administrator service is affected by multiple integer overflow...

Symantec System Center Alert Management System (xfr.exe) Arbitrary Command Execution

$Id: amsxfr.rb 13591 2011-08-19 18:35:29Z mc $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...