Design/Logic Flaw

Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials Information Leakage in Altiris Deployment Solution." NOTE: this description is based on a vague pre-advisory with no...

CVE-2007-5555

Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials Information Leakage in Altiris Deployment Solution." NOTE: this description is based on a vague pre-advisory with no...

CVE-2007-5555

Technical details for CVE-2007-5555 are not publicly available in the provided documents; no affected products, root cause, impact or fix are disclosed. Monitor for updates.

CVE-2002-2294

The CVE-2002-2294 entry describes multiple buffer overflow flaws affecting Symantec Raptor Firewall (versions 6.5/6.5.3), Enterprise Firewall 6.5.2 and 7.0, VelociRaptor series (500/700/1000 and 1100/1200/1300), and Gateway Security (5110/5200/5300). The root cause involves handling issues in two...

CVE-2002-2294

Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service service termination via 1 malformed RealAudio rad packets...

CVE-2002-2281

Symantec Java! JIT Just-In-Time Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler...

CVE-2002-2281

Technical details about CVE-2002-2281 are not publicly available in the provided connected documents. Monitor for updates from authoritative sources.

Solaris 10 (sparc) : 122073-04 (deprecated)

VERITAS NetBackup 6.0 Product Jumbo Patch MP7 for MP4 CD VERSION=6. Date this patch was last updated by Sun : Sep/29/08 This plugin has been deprecated and either replaced with individual 122073 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security...

Solaris 8 (sparc) : 122073-04

VERITAS NetBackup 6.0 Product Jumbo Patch MP7 for MP4 CD VERSION=6. Date this patch was last updated by Sun : Sep/29/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 122073-04

VERITAS NetBackup 6.0 Product Jumbo Patch MP7 for MP4 CD VERSION=6. Date this patch was last updated by Sun : Sep/29/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Symantec Products ActiveX Control NavComUI.dll Code Execution (CVE-2007-2955)

Symantec products include various software applications that deal with security and information management. A remote attacker could exploit this issue by convincing a user to visit a specially crafted HTML document or open a malicious web page. Successful exploitation could result in remote code...

Design/Logic Flaw

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service infinite loop via a certain value in the PACKSIZE field of a RAR archive file header...

CVE-2007-0447

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...

CVE-2007-3699

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service infinite loop via a certain value in the PACKSIZE field of a RAR archive file header...

Heap overflow

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...

CVE-2007-0447

Heap-based buffer overflow in the Decomposer component in multiple Symantec products allows remote attackers to execute arbitrary code via multiple crafted CAB archives...

CVE-2007-3699

The Decomposer component in multiple Symantec products allows remote attackers to cause a denial of service infinite loop via a certain value in the PACKSIZE field of a RAR archive file header...

CVE-2007-0447

The CVE-2007-0447 entry corresponds to a heap-based buffer overflow in the Decomposer used by Symantec products (notably Symantec Antivirus Scan Engine / Mail Security for Exchange/Domino) when processing crafted CAB archives, enabling remote code execution. Connected details corroborate: a heap ...

CVE-2007-3699

CVE-2007-3699 affects the Decomposer component in multiple Symantec products, enabling remote attackers to trigger a denial of service (infinite loop) by crafting the PACK_SIZE field in a RAR header. Connected Nessus entries reiterate this as part of “Symantec Mail Security Engine/Scanner” vulner...

Information disclosure

Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...