5333 matches found
Symantec Alert Management System HNDLRSVC Arbitrary Command Execution
Symantec Systems Center provides centralized systems and policy management for Norton Antivirus Enterprise Solution across multiple Windows NT and NetWare networks. The Symantec Systems Center includes an optional component called the Alert Management System AMS2. An arbitrary command execution...
Google Bans GPS Spy App, Developer Cries Foul
Malware may be difficult to define but, as former U.S. Supreme Court Justice Potter Stewart famously quipped about pornography “you know it when you see it.” At least that’s the position being taken by Google and anti malware firms about two applications designed for mobile phones running Google’...
Symantec Alert Management System Intel Alert Handler command execution
Added: 08/20/2010 BID: 41959 OSVDB: 66807 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on port...
Symantec Alert Management System Intel Alert Handler command execution
Added: 08/20/2010 BID: 41959 OSVDB: 66807 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on port...
Symantec Alert Management System Intel Alert Handler command execution
Added: 08/20/2010 BID: 41959 OSVDB: 66807 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on port...
Symantec Alert Management System Intel Alert Handler command execution
Added: 08/20/2010 BID: 41959 OSVDB: 66807 Background The Symantec Alert Management System 2 AMS2 is used by multiple Symantec products. It includes an Intel Alert Handler service hndlrsvc.exe. This service handles messages forwarded to it by the Alert Originator Manager, which listens on port...
CVE-2010-1524
The SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via unspecified vectors related to allocation of an array of pointers and "string indexing," which triggers memory...
Heap overflow
Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not properly handled by...
Stack overflow
Stack-based buffer overflow in the SpreadSheet Lotus 123 reader wkssr.dll, as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown reco...
CVE-2010-0126
CVE-2010-0126 affects Autonomy KeyView 10.4 and 10.9. The vulnerability is a heap-based buffer overflow in a KeyView component/library used by multiple products (e.g., IBM, Symantec) that processes compound documents. An attacker could trigger code execution by supplying a specially crafted compo...
CVE-2010-0134
CVE-2010-0134 : A signedness error in Autonomy KeyView’s rtfsr.dll (versions 10.4 and 10.9) allows remote code execution when processing the RTF \ls keyword in a list override table entry, triggering a buffer overflow. Affected products are used in various IBM, Symantec, and other bundles. Impact...
CVE-2010-0131
CVE-2010-0131 describes a stack-based buffer overflow in the Spreadsheet Lotus 123 reader (wkssr.dll), affecting Autonomy KeyView 10.4 and 10.9 (and related products). The vulnerability stems from a boundary/float conversion issue in certain record types, enabling remote attackers to execute arbi...
CVE-2010-0126
Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not properly handled by...
CVE-2010-0133
Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader wkssr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to "certain records."...
Symantec Gateway Products DNS Cache Poisoning (CVE-2005-0817)
The Symantec Firewall has a DNS proxy service, DNSD.exe, that acts as a proxy and cache server for the DNS requests generated by internal systems. When the DNS proxy receives a DNS response from a DNS server, the information in the Authoritative and Additional Record will be saved in the DNS cach...
Akamai Download Manager arbitrary file download & execution
------------------------------------------------------------------------ Akamai Download Manager arbitrary file download & execution ------------------------------------------------------------------------ Yorick Koster, April 2009...
Foofus.net Security Advisory: Symantec AMS Intel Alert Handler service Design Flaw
================================================== Foofus.net Security Advisory: foofus-20100726 ================================================== Title: Symantec Antivirus Corporate Edition AMS Intel Alert Handler Version: 10.1.8.8000 and earlier Vendor: Symantec Release Date: 26.07.2010 Issue...
Symantec AMS Intel Alert Handler Command Execution
// Remote command execution at System level without authentication // Advisory:https://www.foofus.net/?pageid=149 // Exploit Title: Symantec AMS Intel Alert Handler service Design Flaw // Date: 07/28/10 // Author: Spider // Software Link: http://www.foofus.net/spider/code/ams-cmd.cpp.txt // Teste...
Symantec Ams Intel Alert Handler Service - Design Flaw
// Remote command execution at System level without authentication // Advisory:https://www.foofus.net/?pageid=149 // Exploit Title: Symantec AMS Intel Alert Handler service Design Flaw // Date: 07/28/10 // Author: Spider // Software Link: http://www.foofus.net/spider/code/ams-cmd.cpp.txt // Teste...
Symantec Ams Intel Alert Handler Service - Design Flaw
Symantec Ams Intel Alert Handler Service - Design Flaw // Remote command execution at System level without authentication // Advisory:https://www.foofus.net/?pageid=149 // Exploit Title: Symantec AMS Intel Alert Handler service Design Flaw // Date: 07/28/10 // Author: Spider // Software Link:...