Symantec AMS Intel Alert Handler Service Design Flaw

Exploit for windows platform in category remote exploits ==================================================== Symantec AMS Intel Alert Handler Service Design Flaw ==================================================== // Remote command execution at System level without authentication //...

Multi-Vendor Autonomy KeyView Filter Multiple Security Issues

SUMMARY Symantec products that ship with the Verity KeyView Filter have updated the module to address multiple security issues being reported in the content filter processing of specifically crafted document formats. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec...

Symantec Antivirus企业版Alert Management服务远程权限提升漏洞

BUGTRAQ ID: 41959 Symantec AntiVirus是非常流行的杀毒解决方案。 Symantec杀毒软件产品中使用Alert Management服务（AMS2）在旧版Symantec Antivirus企业版产品中创建、管理和报告警告。Intel Alert Handler服务（hndlrsvc.exe）为AMS2提供了警告创建和响应功能。由于Symantec产品没有正确地实现这个功能，能够在有漏洞主机的38292端口上创建TCP连接的攻击者可以在主机上执行任意系统级的命令。 Symantec AntiVirus Corporate Edition 9.0...

Symantec System Center Alert Management System (hndlrsvc.exe) Arbitrary Command Execution

Symantec System Center Alert Management System is prone to a remote command-injection vulnerability because the application fails to properly sanitize user-supplied input. This is part of Symantec AntiVirus Corporate Edition 8.0 - 10.1.7. Module Options msf use...

the windows shortcut file execution vulnerability and Defense strategies-vulnerability warning-the black bar safety net

Recently this loophole relatively fiery, simple to say is to construct a malicious shortcut can execute the file code. The vulnerability relates to XP, Vista, Win7, etc. almost all Windows platforms, U disk, mobile phone, digital camera, iPod, etc. all USB devices will become the Trojan of the...

Symantec Backup Exec System Recovery Manager Unauthorized File Upload (CVE-2008-0457)

Symantec Backup Exec System Recovery Manager is a complete, disk-based system recovery solution for Microsoft Windows based servers, desktops, and laptops that allows businesses to recover from system loss or disasters. A file upload vulnerability exists in the Symantec Backup Exec System Recover...

Symantec Sygate Personal Firewall ActiveX Buffer Overflow Vulnerability

Symantec Sygate Personal Firewall is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Symantec Sygate Personal Firewall ActiveX Buffer Overflow Vulnerability

This host is installed with Symantec Sygate Personal Firewall and is prone to Buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: secpodsymantecsygatepersonalfirewallbofvuln.nasl 5368 2017-02-20 14:34:16Z cfi $ Symantec Sygate Personal Firewall ActiveX Buffer Overflow Vulnerability...

Symantec Veritas NetBackup Server bpcd Long Request Buffer Overflow (CVE-2006-6222)

There exists a buffer overflow vulnerability in Symantec VERITAS NetBackup Server. The flaw is caused by incorrect processing of specially crafted BPCD messages. A remote attacker may exploit this vulnerability to inject and execute arbitrary code on the vulnerable system within the security...

Symantec AppStream / Workspace Streaming Remote Code Execution (SYM10-008)

The version of Symantec AppStream or Symantec Workspace Streaming running on the remote host has a remote code execution vulnerability. The client does not properly authenticate to the server before downloading available files. A remote attacker could exploit this by setting up a rogue Workspace...

CVE-2008-4389

Symantec AppStream 5.2.x and Symantec Workspace Streaming SWS 6.1.x before 6.1 SP4 do not properly perform authentication, which allows remote Workspace Streaming servers and man-in-the-middle attackers to download arbitrary executable files onto a client system, and execute these files, via...

Authentication flaw

Symantec AppStream 5.2.x and Symantec Workspace Streaming SWS 6.1.x before 6.1 SP4 do not properly perform authentication, which allows remote Workspace Streaming servers and man-in-the-middle attackers to download arbitrary executable files onto a client system, and execute these files, via...

CVE-2008-4389

Symantec AppStream 5.2.x and Symantec Workspace Streaming 6.1.x before 6.1 SP4 have an authentication flaw that allows a remote, rogue Workspace Streaming server to cause clients to download arbitrary executables and execute them, enabling arbitrary code execution on the client. Affected componen...

CVE-2008-4389

Symantec AppStream 5.2.x and Symantec Workspace Streaming SWS 6.1.x before 6.1 SP4 do not properly perform authentication, which allows remote Workspace Streaming servers and man-in-the-middle attackers to download arbitrary executable files onto a client system, and execute these files, via...

Symantec AppStream and Workspace Streaming vulnerable to arbitrary code download and execution

Overview The Symantec AppStream and Workspace Streaming clients fail to properly validate downloads, which can allow a remote, unauthenticated attacker to download and execute arbitrary code on a vulnerable system. Description Symantec Workspace Streaming is a software distribution solution that...

CVE-2010-2305

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method...

Buffer overflow

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method...

CVE-2010-2305

Buffer overflow in an ActiveX control in SSHelper.dll for Symantec Sygate Personal Firewall 5.6 build 2808 allows remote attackers to execute arbitrary code via a long third argument to the SetRegString method...

CVE-2010-2305

The CVE-2010-2305 issue affects Symantec Sygate Personal Firewall 5.6 (build 2808). A flaw exists in the SSHelper.dll ActiveX control where a buffer overflow is triggered by passing a long third argument to the SetRegString method, allowing remote code execution. The vulnerability is tied to an A...

Symantec Workspace Streaming Potential Unauthorized Downloads

SUMMARY Symantecs Workspace Streaming client fails to properly authenticate with the Symantec Workspace Streaming server when downloading files. This could potentially lead to unauthorized download of arbitrary code to a client system. AFFECTED PRODUCTS Products Affected Product | Version | Build...