Symantec Norton Ghost 'EasySetupInt.dll' ActiveX控件远程拒绝服务漏洞

BUGTRAQ ID: 34696 CNCAN ID：CNCAN-2009042404 Symantec Norton Ghost是一款提供备份恢复功能的软件。 Symantec Norton Ghost包含的ActiveX控件存在安全问题，远程攻击者可以利用漏洞使应用程序崩溃。 Symantec Norton Ghost包含的'EasySetupInt.dll' ActiveX控件对SetupDeleteVolume方法缺少正确处理，构建恶意WEB页，诱使用户打开，可导致应用程序崩溃。 Symantec Norton Ghost 14.0 Symantec Norton Ghost...

Symantec Brightmail Gateway控制中心跨站脚本和权限提升漏洞

BUGTRAQ ID: 34641,34639 CVECAN ID: CVE-2009-0063,CVE-2009-0064 Brightmail Gateway是赛门铁克的信息安全管理平台。 Brightmail Gateway设备的WEB管理控制台Brightmail安全中心没有正确地过滤外部客户端输入，远程攻击者可以通过提交恶意请求执行跨站脚本攻击；此外某些控制台函数还可能允许非特权的控制中心用户获得提升的权限。 Symantec Brightmail Gateway 8.0 Symantec Brightmail Gateway 5.0 Symantec --------...

CVE-2009-0064

Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving 1 administrative scripts or ...

CVE-2009-0063

Cross-site scripting XSS vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving 1 administrative scripts or ...

Cross site scripting

Cross-site scripting XSS vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-0064

Symantec Brightmail Gateway and related appliances are affected by CVE-2009-0064, which involves cross-site scripting and elevation of privilege in the Control Center. The issue stems from improper filtering of external input in the web management console, allowing remote authenticated users to p...

CVE-2009-0063

Symantec Brightmail Gateway Appliance prior to 8.0.1 has a cross-site scripting (XSS) vulnerability in the Control Center. The issue arises from insufficient input filtering of external client input in the web management console, enabling remote authenticated users to inject arbitrary web script ...

CVE-2009-0064

Multiple unspecified vulnerabilities in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allow remote authenticated users to gain privileges, and possibly obtain sensitive information or hijack sessions of arbitrary users, via vectors involving 1 administrative scripts or ...

CVE-2009-0063

Cross-site scripting XSS vulnerability in the Control Center in Symantec Brightmail Gateway Appliance before 8.0.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Symantec Brightmail Gateway and Mail Security Appliance Cross-site Scripting and Elevation of Privil

SUMMARY Symantec Brightmail Gateways Control Center is susceptible to cross-site scripting and elevation of privilege vulnerabilities. AFFECTED PRODUCTS Product | Version | Solutions ---|---|--- Symantec Brightmail Gateway Appliance 8300 | All prior to 8.0.1 | Upgrade to 8.0.1 or later Symantec...

Solaris 10 (x86) : 127656-07 (deprecated)

5.10x86 VERITAS NetBackup 6.5 Product Release Update 6.5.6 for x6. Date this patch was last updated by Sun : May/12/10 This plugin has been deprecated and either replaced with individual 127656 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 9 (sparc) : 119005-02

NetBackup 4.5FP6 files fix. Date this patch was last updated by Sun : Apr/14/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 7 (sparc) : 119010-01

VERITAS NetBackup 5.0 Product Patch MP6. Date this patch was last updated by Sun : Apr/14/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 119010-01

VERITAS NetBackup 5.0 Product Patch MP6. Date this patch was last updated by Sun : Apr/14/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 136860-02

VERITAS NetBackup 6.0 Product Hotfix Patch MP7S02 for MP4 CD VERSI. Date this patch was last updated by Sun : Mar/31/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Norton Ghost Support Module Denial Of Service

----------------------------------------------------------------------------------------- Norton Ghost Support module for EasySetup wizard Remote DoS/Arbitrary code execution? url: http://www.symantec.com/ Author: shinnai mail: shinnaiatautisticidotorg site: http://www.shinnai.net/ File:...

Solaris 7 (sparc) : 119011-01

VERITAS NetBackup 5.1 Product Patch MP4. Date this patch was last updated by Sun : Apr/14/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 119010-01

VERITAS NetBackup 5.0 Product Patch MP6. Date this patch was last updated by Sun : Apr/14/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 119011-01

VERITAS NetBackup 5.1 Product Patch MP4. Date this patch was last updated by Sun : Apr/14/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...