Symantec Mail Security for SMTP可执行程序附件解析拒绝服务漏洞

BUGTRAQ ID: 24625 CVECAN ID: CVE-2007-1792 Symantec Mail Security for SMTP是用于扫描邮件的反垃圾邮件、杀毒和内容过滤软件包。 Mail Security的SMS Filter Hub服务没有正确地解析邮件附件中的可执行程序，如果攻击者发送了恶意邮件的话就可能导致无法处理的访问破坏，服务会周期性的拒绝邮件。 Symantec Mail Security for SMTP 5.0.1 Symantec Mail Security for SMTP 5.0 Symantec Mail Security Appliance...

[Full-disclosure] Secunia Research: Symantec Mail Security for SMTP Boundary Errors

====================================================================== Secunia Research 27/06/2007 - Symantec Mail Security for SMTP Boundary Errors - ====================================================================== Table of Contents Affected...

Symantec Mail Security for SMTP buffer overflow

Buffer overflow on packed executables parsing...

Code injection

libdayzero.dll in the Filter Hub Service filter-hub.exe in Symantec Mail Security for SMTP before 5.0.1 Patch 181 and Mail Security Appliance before 5.0.0-36 allows remote attackers to cause a denial of service crash via a crafted executable attachment in an e-mail, involving the detection of...

CVE-2007-1792

libdayzero.dll in the Filter Hub Service filter-hub.exe in Symantec Mail Security for SMTP before 5.0.1 Patch 181 and Mail Security Appliance before 5.0.0-36 allows remote attackers to cause a denial of service crash via a crafted executable attachment in an e-mail, involving the detection of...

CVE-2007-1792

libdayzero.dll in the Filter Hub Service filter-hub.exe in Symantec Mail Security for SMTP before 5.0.1 Patch 181 and Mail Security Appliance before 5.0.0-36 allows remote attackers to cause a denial of service crash via a crafted executable attachment in an e-mail, involving the detection of...

CVE-2007-1792

The CVE-2007-1792 issue affects Symantec Mail Security for SMTP and its SMS Filter Hub (filter-hub.exe) where libdayzero.dll fails to safely parse executable packers. Remote attackers can send an email with a crafted executable attachment that triggers boundary errors when detecting PE-Shield v0....

SYMSA-2007-004: Multiple Vulnerabilities in Xythos Server Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-004 Advisory Title: Multiple Vulnerabilities in Xythos Server Products Author: Brian Reilly / [email protected] Release Date: 26-06-2007...

Symantec Mail Security for SMTP Executable Attachment Parsing Denial of Service

SUMMARY A denial of service has been discovered in Symantec Mail Security for SMTP when parsing Executable Attachments. Risk Impact Low Remote Access | Yes ---|--- Local Access | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Products | Versions | Solution...

Apple Safari 3 for Windows - Document.Location Denial of Service

Apple Safari 3 for Windows - Document.Location Denial of Service source: https://www.securityfocus.com/bid/24499/info Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input. An attacker may exploit this issue by enticing...

Apple Safari 3.0.1 for Windows - 'Corefoundation.dll' Denial of Service

source: https://www.securityfocus.com/bid/24497/info Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input. An attacker may exploit this issue by enticing victims into opening a maliciously crafted HTML document. Successful...

Apple Safari 3.0.1 for Windows - Corefoundation.dll Denial of Service

Apple Safari 3.0.1 for Windows - Corefoundation.dll Denial of Service source: https://www.securityfocus.com/bid/24497/info Apple Safari for Windows is prone to a denial-of-service vulnerability because it fails to properly handle user-supplied input. An attacker may exploit this issue by enticing...

Symantec Ghost Solution Locate Server Detection

The remote host is running the 'locate' service of Symantec Ghost solution, an OS deployment and management solution. This service is used by clients to discover management servers or to test if the main server is alive. C Tenable Network Security, Inc. include"compat.inc"; if description...

SYM07-011 Symantec Reporting Server password disclosure

SYM07-011: Symantec Reporting Server Password Disclosure June 5, 2007 Risk Impact: Medium Remote Access: Yes Local Access: Yes Authentication Required:Yes Exploit available: No Overview The administrator password for Symantec Reporting Server could be disclosed after a failed login attempt...

Multiple Symantec antiviral products Reporting Server code execution

It's possible to spoof executable report file. Password hash is leaked during failed logon attempt...

Symantec ghost DoS

Crash on parsing UDP/1346, UDP/1347 requests...

iDefense Security Advisory 06.05.07: Symantec Ghost Multiple Denial of Service Vulnerabilities

Symantec Ghost Multiple Denial of Service Vulnerabilities iDefense Security Advisory 06.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jun 05, 2007 I. BACKGROUND Symantec Ghost Solution Suite is an enterprise disk imaging software that allows administrators to remotely back-up and...

Symantec System Center报告服务器远程特权提升漏洞

Symantec Reporting Server是一款Symantec系统中心控制台的可选WEB应用程序。 Symantec Reporting Server处理输出数据存在设计错误，远程攻击者可以利用漏洞以应用程序权限执行任意程序。 报告服务器导出数据处理建立的文件可被未授权用户建立恶意可执行文件并执行。导致获得对应用程序的控制。 Symantec Reporting Server 1.0.197.0 Symantec Client Security 3.1 .401 Symantec Client Security 3.1 .400 Symantec Client Security...

Design/Logic Flaw

Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service client or server crash via malformed requests to the daemon port, 1346/udp or 1347/udp...

CVE-2007-3132

Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service client or server crash via malformed requests to the daemon port, 1346/udp or 1347/udp...