5333 matches found
CVE-2004-1483
Multiple unknown vulnerabilities in the ActiveX and HTML file browsers in Symantec Clientless VPN Gateway 4400 Series 5.0 have unknown attack vectors and unknown impact...
CVE-2004-0369
Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload...
CVE-2004-1910
rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service crash via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is...
CVE-2004-1473
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 and Gateway Security 320, 360, and 360R running firmware before 622 allow remote attackers to bypass filtering and determine whether the device is running services such as tftpd, snmpd, or isakmp via a UDP...
CVE-2004-2147
Unknown versions of Symantec Norton AntiVirus and Microsoft Outlook allow attackers to cause a denial of service crash via malformed e-mail messages 1 without a body or 2 without a carriage return "\n" separating the headers from the body...
CVE-2004-1472
Symantec Enterprise Firewall/VPN Appliances 100, 200, and 200R running firmware before 1.63 allow remote attackers to cause a denial of service device freeze via a fast UDP port scan on the WAN interface...
CVE-2004-2755
Cross-site scripting XSS vulnerability in Symantec Web Security 2.5, 3.0.0, and 3.0.1 before build 62 allows remote attackers to inject arbitrary web script or HTML via the query string in blocked URLs that are listed in 1 error or 2 block page messages...
[SA13593] Symantec Brightmail AntiSpam Notifier Denial of Service
TITLE: Symantec Brightmail AntiSpam Notifier Denial of Service SECUNIA ADVISORY ID: SA13593 VERIFY ADVISORY: http://secunia.com/advisories/13593/ CRITICAL: Not critical IMPACT: DoS WHERE: From remote SOFTWARE: Symantec Brightmail AntiSpam 6.x http://secunia.com/product/3656/ DESCRIPTION: A weakne...
Symantec Brightmail AntiSpam DoS
Large number of quarantined spam messages causes notifier service to crash...
CVE-2004-1768
The character converters in the Spamhunter and Language ID modules for Symantec Brightmail AntiSpam 6.0.1 before patch 132 allow remote attackers to cause a denial of service crash via messages with the ISO-8859-10 character set, which is not recognized by the converters...
Symantec LiveUpdate privilege escalation
No description provided...
Secure Network Operations SNOsoft Research Team [SRT2004-12-14-0322] Symantec LiveUpdate Advisory
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Secure Network Operations, Inc. http://www.secnetops.com/research Strategic Reconnaissance Team researchatsecnetops.com Team Lead Contact JxTatsecnetops.com Spam Contact rm -rf /@snosoft.com Who we are: Secure Network Operations provides network...
CVE-2004-0920
Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service application crash using a filename containing an MS-DOS device name...
The ActiveX and HTML file browsers of the Symantec 4400 Series Clientless VPN Gateway contains various unspecified vulnerabilities
Overview The ActiveX and HTML file browsers in the Symantec Clientless VPN Gateway 4400 Series contain various unspecified vulnerabilities. Description The Symantec Clientless VPN Gateway 4400 Series is a stand-alone security appliance for connecting remote users to a trusted network via a virtua...
Multiple Symantec security appliances fail to properly filter port 53/udp traffic
Overview A vulnerability exists in multiple Symantec security appliances that could allow a remote attacker to bypass the firewall using a source port of 53/udp. Description Symantec's Firewall/VPN appliances and Gateway Security models include a number of services such as tftpd, snmpd, and isakm...
Symantec Firewall/VPN appliance vulnerable to DoS via UDP port scan
Overview A vulnerability in the Symantec Firewall/VPN appliance could allow an attacker to cause a denial-of-service condition. Description The Symantec Firewall/VPN appliance supports a number of services that utilize the UDP protocol including tftpd, snmpd, and isakmp. There is a vulnerability ...
Multiple Symantec security appliances do not allow the SNMP read-write community string to be changed
Overview A vulnerability exists in multiple Symantec security appliances that could allow a remote attacker to modify the configuration of the device using SNMP. Description The Simple Network Management Protocol SNMP enables network and system administrators to remotely monitor and configure...
CVE-2004-0920
Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service application crash using a filename containing an MS-DOS device name...
CVE-2004-0920
CVE-2004-0920 affects Symantec Norton AntiVirus 2004 and earlier. A vulnerability in handling reserved MS-DOS device names (e.g., AUX, CON, COM1, LPT1) during file/ directory scanning can allow a virus to evade detection or cause an application crash, potentially enabling DoS. The issue arises wh...