CVE-2006-4314

The manager server in Symantec Enterprise Security Manager ESM 6 and 6.5.x allows remote attackers to cause a denial of service hang via a malformed ESM agent request...

CVE-2006-4314

The manager server in Symantec Enterprise Security Manager ESM 6 and 6.5.x allows remote attackers to cause a denial of service hang via a malformed ESM agent request...

CVE-2006-4314

The CVE-2006-4314 entry concerns the Symantec Enterprise Security Manager (ESM) manager server (versions 6 and 6.5.x). A remote attacker can cause a denial of service (hang) by sending a malformed ESM agent request. The available documents confirm the affected product and the impact (DoS) but do ...

DoS против Symantec Enterprise Security Manager

Malcrafted request can be used to lockup server and agent...

Symantec Enterprise Security Manager Denial-of-Service Vulnerability

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-08-22 Symantec Enterprise Security Manager Denial-of-Service Vulnerability CVE Number Pending • Synopsis The Symantec Enterprise Security Manager ESM platform and agent are susceptible to a race condition that can cause...

CVE-2006-4266

Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local users to provide Trojan horse libraries to Norton by using RegSaveKey and RegRestoreKey to modify HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners, as demonstrated usin...

CVE-2006-4266

Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local users to provide Trojan horse libraries to Norton by using RegSaveKey and RegRestoreKey to modify HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners, as demonstrated usin...

CVE-2006-4266

CVE-2006-4266 affects Norton Personal Firewall 2006 (at least 9.1.0.33) where the product does not adequately protect Norton registry keys. The issue allows a local attacker to influence Norton by using RegSaveKey/RegRestoreKey to modify HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners (demonstrated with ...

Symantec Veritas Backup Exec for Windows Server vulnerable to heap-based buffer overflow

Overview Symantec Veritas Backup Exec for Windows Server contains multiple heap-based buffer overflow vulnerabilities which can allow a remote, authenticated attacker to cause a denial of service or execute arbitrary code. Description VERITAS Backup Exec for Windows Server is a data backup and...

CVE-2006-4228

Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface...

CVE-2006-4228

Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 (20060816) is affected. An unauthenticated, remote attacker can bypass authentication and gain privileges via unknown attack vectors in the management interface. Product: NetBackup PureDisk Remote Office Edition 6.0; conditi...

CVE-2006-4228

Symantec Veritas NetBackup PureDisk Remote Office Edition 6.0 before MP1 20060816 allows remote attackers to bypass authentication and gain privileges via unknown attack vectors in the management interface...

Symantec Enterprise Security Manager Denial-of-Service

SUMMARY Symantec Enterprise Security Manager is susceptible to a race condition that can cause the application to lock up, resulting in a denial-of-service. Risk Impact Medium Remote | Yes ---|--- Local | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Vulnerable...

SYM06-16 Symantec NetBackup PureDisk Remote Office Edition Elevation of Privilege

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Symantec Security Advisory SYM06-015 16 August 2006 Symantec NetBackup PureDisk: Non-Privileged User Authentication Bypass Elevation of Privilege Revision History None Severity Medium highly dependent on network configuration Remote Access Yes Local...

Symantec Veritas NetBackup 6.0 PureDisk Remote Office Edition authentication bypass

No description provided...

pcAnywhere认证拒绝服务漏洞

BUGTRAQ ID: 15646 CVECAN ID: CVE-2005-3934 Symantec pcAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 pcAnywhere在处理特制消息的时候存在溢出漏洞，可能导致拒绝服务。由于溢出发生在认证之前，因此远程攻击者无需有效的凭据便可利用这个漏洞。 Symantec pcAnywhere 11.5.1 Symantec pcAnywhere 11.0.1 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Symantec Backup Exec Multiple Heap Overflow RCE (SYM06-014)

The Windows remote host contains Symantec Backup Exec for Windows Server or Backup Exec Continuous Protection Server, a commercial backup product. The version of the software installed on the remote host is affected by multiple heap overflow conditions involving specially crafted calls to its RPC...

CVE-2006-4128

Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 all builds, Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and...

CVE-2006-4128

The CVE-2006-4128 issue affects Symantec VERITAS Backup Exec products (Backup Exec for Windows Server and Remote Agent, Backup Exec Continuous Protection Server Remote Agent, and related Netware/Remote Agents) with multiple heap-based buffer overflows exposed via crafted RPC messages. The vulnera...

CVE-2006-4128

Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 all builds, Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and...