CVE-2006-3785

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif aka caller or CallerID file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin...

CVE-2006-3786

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif aka caller or CallerID files, which allows local users to generate a custom .cif file and modify the superuser flag...

CVE-2006-3786

Symantec pcAnywhere 12.5 uses weak integrity protection for .cif aka caller or CallerID files, which allows local users to generate a custom .cif file and modify the superuser flag...

CVE-2006-3786

Symantec pcAnywhere 12.5 is affected by CVE-2006-3786 due to weak integrity protection for .cif (CallerID) files, enabling local users to craft a custom .cif file and modify the superuser flag. The concrete impact is local privilege manipulation. Exploitation status is not provided in the connect...

CVE-2006-3785

CVE-2006-3785 Affected software: Symantec pcAnywhere 12.5. Vulnerability: Passwords in the GUI are obfuscated but not encrypted in the associated .cif (CallerID) file. This allows local users to extract passwords from the CIF/file using tools such as Nirsoft Asterwin. Impact: Local access is requ...

CVE-2006-3785

Symantec pcAnywhere 12.5 obfuscates the passwords in a GUI textbox with asterisks but does not encrypt them in the associated .cif aka caller or CallerID file, which allows local users to obtain the passwords from the window using tools such as Nirsoft Asterwin...

CVE-2006-3784

Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by inserting a superuser .cif aka caller or CallerID file into the folder, and then using a pcAnywhere client to login as a local administrator...

CVE-2006-3784

CVE-2006-3784 affects Symantec pcAnywhere 12.5. The vulnerability arises from weak default permissions on the "/Symantec\pcAnywhere\Hosts" folder, enabling local users to gain privileges by placing a superuser .cif (CallerID) file in that folder and then logging in with a pcAnywhere client as a l...

Microsoft PowerPoint does not properly handle malformed shapes

Overview Microsoft PowerPoint contains a vulnerability that may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Microsoft PowerPoint contains a vulnerability that could be exploited when PowerPoint opens a specially crafted document. Accordin...

SYMSA-2006-004 (Full Details): Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-004 Advisory Title: Vulnerability in Graphics Rendering Engine Could Allow Remote Code Execution Author : Peter Ferrie / [email protected]...

SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-007 Advisory Title: Microsoft Office Malformed String Parsing Vulnerability Author : Elia Florio / [email protected] Release Date :...

SYMSA-2006-007: Microsoft Office Malformed String Parsing Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-007 Advisory Title: Microsoft Office Malformed String Parsing Vulnerability Author : Elia Florio / [email protected] Release Date :...

Update Protection against Symantec Sygate Management Server SQL Injection Vulnerability

A vulnerability was identified in Symantec's Sygate Management Server SMS. A remote attacker could supply code into a URL which would allow the attacker to overwrite the password for any SMS account. Successful exploitation would allow the attacker to access any SMS console with the account's...

SYMSA-2006-005

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID : SYMSA-2006-005 Advisory Title: Lanap CAPTCHA bypass exposure Author : Michael White, [email protected] and Graham Murphy, [email protected]...

CVE-2006-3072

M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation...

CVE-2006-3072

M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation...

CVE-2006-3072

CVE-2006-3072 affects Symantec Security Information Manager prior to 4.0.2.29 HOTFIX 1, where the M4 Macro Library processes crafted rule definitions that produce dangerous Java code during M4 transformation, enabling local users to execute arbitrary commands. The vulnerability is local in scope ...

Symantec Antivirus Software Detection and Status

A Symantec antivirus application is installed on the remote host. Note that this plugin checks that the application is running properly and that its latest virus definitions are loaded. This script has been rewritten by Montgomery County Original script was written by Jeff Adams and Tenable Netwo...

Symantec Security Information Manager Authentication bypass

SUMMARY A security vulnerability has been found in the current release of Symantec Security Information Manager. Risk Impact Low Remote | No ---|--- Local | Yes Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Product | Version | Build | Update To ---|---|---|---...

[EEYEB-20060524] Symantec Remote Management Stack Buffer Overflow

Symantec Remote Management Stack Buffer Overflow Release Date: June 12, 2006 Date Reported: May 24, 2006 Severity: High Remote Code Execution Systems Affected: Symantec AntiVirus 10.0.x for Windows all versions Symantec AntiVirus 10.1.x for Windows all versions Symantec Client Security 3.0.x for...