Symantec Backup Exec for Windows Multiple Vulnerabilities

Binary data veritasagentbypass.nbin...

Windows RPC worm (MS08-067) in the wild

The worm-type exploitation has started. More information at http://www.f-secure.com/weblog/archives/00001526.html The worm component has reportdly detection name Exploit.Win32.MS08-067.g and the kernel component Rootkit.Win32.KernelBot.dg, in turn. Symantec uses Worm category too and the name...

Insomnia : ISVA-081020.1 - Altiris Deployment Server Agent - Privilege Escalation

Insomnia Security Vulnerability Advisory: ISVA-081020.1 Name: Altiris Deployment Server Agent - Privilege Escalation Released: 20 October 2008 Vendor Link: http://www.altiris.com/ Affected Products: Altiris Deployment Server 6.X Original Advisory:...

Symantec Veritas Storage Foundation unauthorized access

qioadmin utility allows local files read access. qiomkfile allows memory content reading...

Symantec Anti Virus Corporate Edition Check

This plugin checks that the remote host has Symantec AntiVirus Corporate installed and properly running, and makes sure that the latest Vdefs are loaded. SPDX-FileCopyrightText: 2008 Jeff Adams / Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and are...

Symantec Web Security Detection (HTTP)

The remote web server appears to be running Symantec Web Security, for filtering traffic of viruses and inappropriate content. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Symantec Anti Virus Corporate Edition Check

This plugin checks that the remote host has Symantec AntiVirus Corporate installed and properly running, and makes sure that the latest Vdefs are loaded. This NVT has been depreciated as it produces false positives. Also it is not referenced by any other NVT. OpenVAS Vulnerability Test $Id:...

Symantec Web Security flaws

The remote service is affected by multiple vulnerabilities. Description : According to its banner, the version of Symantec Web Security on the remote host is vulnerable to denial of service and cross-site scripting attacks. OpenVAS Vulnerability Test $Id: symantecwsdos.nasl 5676 2017-03-22...

Symantec Web Security flaws

According to its banner, the version of Symantec Web Security on the remote host is vulnerable to denial of service and cross-site scripting attacks. SPDX-FileCopyrightText: 2008 David Maciejak Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

GEAR Software CD DVD Filter Driver Insecure Method Local Privilege Escalation

The version of GEAR Software's CD DVD Filter kernel driver GEARAspiWDM.sys on the remote host contains an insecure method that allows a local user to make an unlimited number of calls to 'IoAttachDevice' from user-land, thereby enabling him to exploit a local privilege escalation flaw in the...

Symantec Altiris Deployment Solution明文口令漏洞

BUGTRAQ ID: 31767 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec Altiris Deployment Solution代理在系统内存中以明文存储了安装期间所设置的Application Identity Account口令，授权访问Deployment Solution Server系统的非特权用户可以从系统内存检索这个口令，然后利用这个口令对客户端执行各种操作。 Symantec Altiris Deployment Solution 6.x...

Symantec Veritas File System qioadmin本地信息泄露漏洞

BUGTRAQ ID: 31679 VERITAS File System（VxFS）是Symantec Storage Foundation套件中的文件系统组件。 VxFS的qioadmin工具中存在文件内容泄露漏洞。如果系统授权访问到系统并可以运行qioadmin工具的话，就可以向qioadmin提供任意文件名并将文件内容重新定向并dump到标准错误输出中。qioadmin工具为set-uid root，因此非特权用户可以绕过系统文件权限限制访问特权系统信息。 Symantec Veritas File System 5.x Symantec Veritas File System...

Symantec Veritas File System qiomkfile本地信息泄露漏洞

BUGTRAQ ID: 31678 CVECAN ID: CVE-2008-3248 VERITAS File System（VxFS）是Symantec Storage Foundation套件中的文件系统组件。 VxFS的set-uid root程序qiomkfile用于管理帮助提供事件处理效率的特殊文件，qiomkfile将未初始化的数据写入到点文件。如果在命令行通过-s和-h标记向qiomkfile传送了各种数字值的话，就会导致向点文件写入文件系统内存的块。 Symantec Veritas File System 5.x Symantec Veritas File System...

Symantec Altiris Deployment Solution客户端GUI本地权限提升漏洞

BUGTRAQ ID: 31766 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Altiris客户端GUI的主窗口有一个隐藏按键，该按键的标题为“命令提示符”。点击这个按键会导致GUI试图用以下命令行参数调用CreateProcess： c:\Program Files\Altiris\AClient\cmd.exe...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

Information disclosure

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading file...

Code injection

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-3248

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading file...

CVE-2008-3248

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading file...

CVE-2008-4638

CVE-2008-4638 affects Symantec Veritas Storage Foundation (VxFS) 5.0 and earlier, via the Quick I/O for Databases feature. The vulnerable component is the setuid root utility qioadmin , which can be fed an arbitrary filename and will write that file’s contents to the standard error stream, enabli...