OpenX Arbitrary File Upload Vulnerability

OpenX is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to adequately validate user- supplied input. An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may facilitate...

Symantec’s Altiris Deployment and Notification Management Web Console RunCmd Vulnerability

SUMMARY Symantecs Altiris Deployment Solution, Notification Server and Symantec Management Platform web consoles install a vulnerable ActiveX control. Exploitation of one of the methods used by this control could possibly lead to unauthorized information disclosure, system information corruption ...

Symantec VERITAS NetBackup vnetd Buffer Overflow (CVE-2006-0991)

The Symantec VERITAS NetBackup server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup agents and a master...

Symantec AntiVirus Real Time Virus Scan Service Stack Overflow (CVE-2006-2630)

Symantec Antivirus Corporate Edition and Symantec Client Security are applications designed to protect organizations from the threat of viruses, malware, and intrusion attempts. Both applications can be deployed in an enterprise network environment, and they both support an anti-virus scanning...

Symantec VERITAS NetBackup Volume Manager Buffer Overflow (CVE-2006-0989)

The Symantec VERITAS NetBackup server product suite is an enterprise backup system solution available for various platforms. It is capable of performing scheduled automatic backups as well as manual backups invoked by a client. A minimal backup environment consists of backup agents and a master...

Symantec pcAnywhere Message Buffer Overflow (CVE-2005-3934)

Symantec pcAnywhere product line is a remote PC control solution for Windows systems. The product provides the ability for authenticated users to fully manage remote machines that are properly set up with the pcAnywhere software. There exists a denial of service vulnerability in Symantec...

Symantec Multiple Products AeXNSConsoleUtilities Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3031 BID: 36698 OSVDB: 59597 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A stack buffer overflow vulnerability in the AeXNSConsoleUtilities.dll ActiveX control allows remote attackers to execute...

Symantec Multiple Products AeXNSConsoleUtilities Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3031 BID: 36698 OSVDB: 59597 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A stack buffer overflow vulnerability in the AeXNSConsoleUtilities.dll ActiveX control allows remote attackers to execute...

Symantec Multiple Products AeXNSConsoleUtilities Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3031 BID: 36698 OSVDB: 59597 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A stack buffer overflow vulnerability in the AeXNSConsoleUtilities.dll ActiveX control allows remote attackers to execute...

Symantec Multiple Products AeXNSConsoleUtilities Buffer Overflow

Added: 11/06/2009 CVE: CVE-2009-3031 BID: 36698 OSVDB: 59597 Background Symantec Altiris Deployment Solution provides tools to deploy software on desktops and servers. Problem A stack buffer overflow vulnerability in the AeXNSConsoleUtilities.dll ActiveX control allows remote attackers to execute...

Symantec Altiris ConsoleUtilities ActiveX控件缓冲区溢出漏洞

Bugraq ID: 36698 CVE ID：CVE-2009-3031 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 在初次访问Altiris Deployment Solution等产品管理服务器的管理WEB站点时会安装一个ActiveX控件AeXNSConsoleUtilities.dll，此函数"BrowseAndSaveFile"存在一个基于栈的缓冲区溢出： Name: ConsoleUtilities Class Vendor: Altiris, Inc. Type...

NSOADV-2009-001: Symantec ConsoleUtilities ActiveX Control Buffer Overflow

Security Advisory NSOADV-2009-001 Title: Symantec ConsoleUtilities ActiveX Control Buffer Overflow Severity: Critical Advisory ID: NSOADV-2009-001 Found Date: 09.09.2009 Date Reported: 15.09.2009 Release Date: 02.11.2009 Author: Nikolas Sotiriu Mail: nso-research at sotiriu.de URL:...

Symantec Altiris Notification Server / Symantec Management Platform / Symantec Altiris Deployment Solution ActiveX buffer overflow

ConsoleUtilities ActiveX buffer overflow...

CVE-2009-3031

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server NS 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3,...

Stack overflow

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server NS 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3,...

CVE-2009-3031

The CVE-2009-3031 issue is a stack-based buffer overflow in the BrowseAndSaveFile() method of the AeXNSConsoleUtilities.dll (6.0.0.1846) ActiveX control used by Symantec Altiris Notification Server, Deployment Solution, and SMP . A long string in the second argument can lead to remote code execut...

CVE-2009-3031

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server NS 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3,...

Researchers Find Trojan Using Facebook

Researchers at Symantec have discovered a trojan that uses Facebook to communicate with a control and command server. Dubbed “whitewell” this malware spreads via email, contacts the mobile version of Facebook and uses its Notes section to perform actions based on the Notes titles. Andrea Lelli...

Symantec ConsoleUtilities ActiveX Control Buffer

No description provided by source. here is a metasploit exploit module for the Symantec ConsoleUtilities ActiveX Control buffer overflow i published today. http://sotiriu.de/adv/NSOADV-2009-001.txt http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-3031 Sorry, if the code is ugly. It's my first M...

Symantec ConsoleUtilities ActiveX Control Metasploit Exploit

Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this tool. require 'msf/core' class Metasploit3 'Symantec ConsoleUtilities ActiveX Control Buffer Overflow', 'Description' = %q This module exploits a stack overflow in Symantecs ConsoleUtilities...