Symantec Norton个人防火墙SuiteOwners注册表键值安全绕过漏洞

Symantec Norton Personal Firewall是一款流行的个人桌面防火墙。 Symantec Norton Personal Firewall不正确的注册表键值保护，远程攻击者可以利用漏洞绕过安全保护，装载任意文件等，导致特权提升。...

Symantec NetBackup PureDisk验证绕过漏洞

Symantec Veritas NetBackup PureDisk Remote Office Edition是一款备份解决方案。 Symantec Veritas NetBackup PureDisk Remote Office Edition存在验证绕过问题，远程攻击者可以利用漏洞对系统的管理员访问，导致控制整个系统。 Symantec Veritas NetBackup PureDisk管理接口存在特权提升问题，管理接口只能通过SSL WEB连接，但是能访问网络和运行此管理程序主机的非特权用户，可绕过管理接口验证并提升特权，导致完全控制系统，目前没有详细漏洞细节提供。...

Symantec Backup Exec多个堆溢出漏洞

Symantec Backup Exec Remote Agent是一款备份解决方案。 Netware Servers版本下的Symantec Backup Exec不正确验证和过滤用户输入，远程攻击者可以利用漏洞进行堆破坏攻击，可导致拒绝服务或执行任意指令。 Backup Exec 9.1 and 9.2 for Netware Servers Remote Agent for Windows Servers存在这些漏洞，根据报告Backup Exec for Windows Servers, Backup Exec Continuous Protection Server CPS...

SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2006-012 Advisory Title: 2X ThinClientServer Create Admin Account Replay Vulnerability Author: Oliver Karow / [email protected] Release Date:...

CVE-2006-6308

Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that...

CVE-2006-6308

Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that...

CVE-2006-6308

Symantec LiveState 7.1 Agent for Windows is affected. Local users can potentially gain privileges by stopping the shstart.exe process and selecting Web Self-Service from the system tray, which opens a browser window running with elevated privileges. The root cause is the browser window inheriting...

Symantec LiveState Agent privilege escalation

It's possible to launch Windows Explorer with SYSTEM privileges...

Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation

hello, we've found local privilege escalation in Symantec LiveState agent. PoC: 1. kill shstart.exe process 2. from symantec livestate agent icon in systray choose "Web Self-Service" 3. New browser window will open, it is running with SYSTEM privileges. tested on fully patched Win XP SP2, Symante...

CVE-2003-1310

The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...

CVE-2003-1310

The CVE concerns Norton AntiVirus 2002 on Windows, specifically the DeviceIoControl path in the Norton Device Driver (NAVAP.sys). The vulnerability allows local privilege escalation by overwriting memory locations through certain IOCTL codes, enabling a non-privileged user to gain higher privileg...

Symantec Automated Support Assistant ActiveX control buffer overflow

Overview The Symantec Automated Support Assistant ActiveX control contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Symantec Automated Support Assistant control is an ActiveX control that comes with...

Solaris 7 (sparc) : 119007-01

NetBackup 5.1 UNIX server and client fix. Date this patch was last updated by Sun : Nov/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 119007-01

NetBackup 5.1 UNIX server and client fix. Date this patch was last updated by Sun : Nov/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Symantec Enterprise Security Manager拒绝服务漏洞

Symantec Enterprise Security Manager（ESM）可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 如果能够模拟为ESM代理向管理器服务器发送特制的请求的话，就会导致ESM管理器和代理都锁定，必须重启才能恢复正常运行。 Symantec Enterprise Security Manager 6.5.2 Symantec Enterprise Security Manager 6.5.1 Symantec Enterprise Security Manager 6.5 Symantec Enterprise...

Sun Solaris 10 - UFS Local Denial of Service

Sun Solaris 10 - UFS Local Denial of Service source: https://www.securityfocus.com/bid/20919/info Sun Solaris 10 is prone to a local denial-of-service vulnerability. This issue affects the UFS filesystem-handling code. An attacker can exploit this issue to crash the affected computer, denying...

Symantec On-Demand Protection加密数据信息泄露漏洞

Symantec On-Demand Agent（SODA）和Symantec On-Demand Protection（SODP）可为基于WEB的应用和服务提供虚拟桌面环境。 本地攻击者可以解密Symantec On-Demand虚拟桌面环境所加密的文件，访问文件中的数据。攻击的具体影响取决于所加密文件的内容。 Symantec SODP 2.6 build 2232 Symantec SODA 2.5 MR2 build 2156 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://support.sygate.com/...

PCAnywhere CIF文件本地权限提升漏洞

Symantec PCAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 PCAnywhere的CIF文件可能包含有超级用户标签，而这个文件默认下不安全的存储在了“Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\Hosts\”，导致任何用户都可以读取文件内容并创建新文件。 攻击者可以创建新的CIF文件，设置超级用户标签，并将其放置在Hosts目录中，这样用户登录到PCAnywhere时就会获得管理员权限。 Symantec pcAnywhere 12.5...

Symantec自动支持助手ActiveX控件缓冲区溢出漏洞

Symantec自动支持助手是很多Symantec产品中所捆绑的ActiveX控件，用于识别Symantec用户产品中的问题。 Symantec自动支持助手ActiveX控件没有正确地验证外部输入，可能导致栈溢出并以运行浏览器用户的权限执行任意指令。 成功的攻击要求攻击者能够伪装成为可信任的Web站点并诱骗用户点击恶意的链接。 Symantec Norton AntiVirus 2006 Symantec Norton AntiVirus 2005 Symantec Norton Internet Security 2006 Symantec Norton Internet Securi...

Symantec AntiVirus IOCTL内核权限提升漏洞

Symantec AntiVirus是非常流行的杀毒解决方案。 Symantec AntiVirus的NAVEX15.SYS和NAVENG.SYS设备驱动的IOCTL处理器没有充分地验证地址空间，允许攻击者使用常数的双字值覆盖任意内存。 如果攻击者能够向0x222AD3、0x222AD7和0x222ADB IOCTL处理器发送特制的I/O请求报文的话，就会导致以内核权限执行任意指令。 Symantec AntiVirus 所有版本 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.symantec.com/...