5333 matches found
Symantec Mail Security for SMTP < 5.0.1 Patch 200 Unspecified DoS
Symantec Mail Security for SMTP, which provides anti-spam and anti- virus protection for the IIS SMTP Service, is installed on the remote Windows host. The version of Symantec Mail Security for SMTP installed on the remote host is affected by an unspecified denial of service vulnerability. C...
Symantec PGP/Encryption Desktop Detection (Windows SMB Login)
Detects the installed version of Symantec PGP/Encryption Desktop on Windows. The script logs in via smb, search for the product name in the registry, gets version from the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...
Norton Internet Security Denial of Service Vulnerability
This host has Norton AntiVius in Norton Internet Security installed and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbnortoninternetsecdosvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Norton Internet Security Denial of Service Vulnerability Authors: Sharath S Copyrigh...
Norton Internet Security Denial of Service Vulnerability
Norton AntiVius in Norton Internet Security is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2008-5543
Symantec AntiVirus SAV 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
Design/Logic Flaw
Symantec AntiVirus SAV 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5543
Symantec AntiVirus SAV 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt extension, or 3 a .jpg extension, as...
CVE-2008-5543
CVE-2008-5543 affects Symantec AntiVirus 10 when Internet Explorer 6/7 is used, enabling attackers to bypass malware-detection in HTML by prepending an MZ header (EXE info) and disguising the filename with no extension, .txt, or .jpg. The vulnerability mirrors a broader family seen in related CVE...
CVE-2008-5407
Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors...
CVE-2008-5408
Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via unknown...
Authentication flaw
Multiple unspecified vulnerabilities in the Backup Exec remote-agent logon process in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allow remote attackers to bypass authentication, and read or delete files, via unknown vectors...
Buffer overflow
Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via unknown...
KLA10352 Multiple vulnerabilities in Symantec Backup Exec
Multiple serious vulnerabilities have been found in Symantec Backup Exec. Malicious users can exploit these vulnerabilities to bypass auth, read / delete files, cause denial of service and possibly execute arbitrary code. Below is a complete list of vulnerabilities 1. Vectors related to the...
CVE-2008-5407
CVE-2008-5407 affects Symantec Backup Exec for Windows Servers (11.x and 12.x families) with vulnerabilities in the remote-agent logon process that allow remote attackers to bypass authentication and read or delete files via unknown vectors. Related CVE-2008-5408 describes a buffer overflow in th...
CVE-2008-5408
Symantec Backup Exec for Windows Servers is affected by CVE-2008-5408: a buffer overflow in the data management protocol affects multiple builds (11.0 6235/7170; 12.0 1364; 12.5 2213). The vulnerability allows remote authenticated users to cause a denial of service (application crash) and potenti...
CVE-2008-5408
Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 aka 11d builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allows remote authenticated users to cause a denial of service application crash and possibly execute arbitrary code via unknown...
Microsoft Internet Explorer XML Handling Remote Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Faile...
Altiris Deployment Solution Agent < 6.9.355 Local Privilege Escalation (SYM08-019)
The version of the Altiris Deployment Solution Agent installed on the remote host is affected by a local privilege escalation issue. Successful exploitation of this issue could allow an authorized non-privileged user to gain local system access on the client system. C Tenable Network Security, In...
Symantec Backup Exec远程绕过认证及缓冲区溢出漏洞
BUGTRAQ ID: 32346,32347 Symantec Backup Exec是一款全面的数据备份解决方案。 Backup Exec的远程代理所使用的一些认证方式中存在多个错误，可能允许用户绕过认证获得非授权访问，读取或删除任意文件；此外数据管理协议中还存在缓冲区溢出漏洞。远程攻击者可以通过前一个漏洞认证为特权用户，然后触发缓冲区溢出导致执行任意指令。 Symantec Backup Exec for Windows Servers 12.5 Symantec Backup Exec for Windows Servers 12.0 Symantec Backup Exec f...