Symantec firewalls multiple problems

Heap and stack overflows on NetBIOS name service packets parsing, endless loop on DNS packets parsing, stack overflow on oversized canonical DNS name...

Multiple Symantec firewall products fail to properly process NBNS response packets

Overview There is a buffer overflow vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted NetBIOS Name Service NBNS response packet could allow an unauthenticated, remote attacker to execute arbitrary code with kernel privileges. Description Symante...

Multiple Symantec firewall products contain a buffer overflow in the processing of DNS resource records

Overview There is a buffer overflow vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted Domain Name Service DNS packet could allow an unauthenticated, remote attacker to execute arbitrary code with kernel privileges. Description Symantec offers a...

[Full-Disclosure] EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service

Symantec Multiple Firewall DNS Response Denial-of-Service Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Denial of Service Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton Internet...

[Full-Disclosure] EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption

Symantec Multiple Firewall NBNS Response Remote Heap Corruption Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Kernel Code Execution Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton...

[Full-Disclosure] EEYE: Symantec Multiple Firewall Remote DNS KERNEL Overflow

Symantec Multiple Firewall Remote DNS KERNEL Overflow Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Kernel Access Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton Internet Security 200...

[Full-Disclosure] EEYE: Symantec Multiple Firewall NBNS Response Processing Stack Overflow

Symantec Multiple Firewall NBNS Response Processing Stack Overflow Release Date: May 12, 2004 Date Reported: April 19, 2004 Severity: High Remote Kernel Code Execution Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2002 Symantec Norton Internet Security 2003 Symantec Norton...

Multiple Symantec firewall products contain a heap corruption vulnerability in the handling of NBNS response packets

Overview There is a heap corruption vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted NetBIOS Name Service NBNS response packet could allow an unauthenticated, remote attacker to execute arbitrary code with kernel privileges. Description Symante...

Multiple Symantec firewall products fail to properly process DNS response packets

Overview There is a vulnerability in multiple Symantec firewall products in which attempts to process a specially crafted Domain Name Service DNS response packet could allow an unauthenticated, remote attacker to cause a denial of service condition. Description Symantec offers a suite of corporat...

CVE-2004-0375

The vulnerability CVE-2004-0375 affects SYMNDIS.SYS in multiple Symantec firewall/Norton products (Norton Internet Security, Norton Personal Firewall, Client Firewall 5.x, Client Security 1.x) where parsing TCP options can trigger an infinite loop and a denial of service. Specifically, sending a ...

EUVD-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

CVE-2004-0375

SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service infinite loop via a TCP packet with 1 SACK option or 2 Alternate Checksum Dat...

Symantec Firewall Malformed TCP Packet Options Remote DoS

The remote system appears vulnerable to an invalid Options field within a TCP packet. At least one vendor firewall Symantec has been reported prone to such a bug. An attacker, utilizing this flaw, would be able to remotely shut down the remote firewall stopping all network-based transactions by...

RE: [Full-Disclosure] EEYE: Symantec Multiple Firewall TCP Options Denial of Service

On 04/23/2004: eEye Digital Security posted: eE"Derek Soeder" [email protected] Sent by: [email protected] 04/23/2004 01:36 PM Symantec Multiple Firewall TCP Options Denial of Service Release Date: April 23, 2004 Date Reported: March 9th, 2004 Severity: High Remote Denial of...

Symantec personal firewalls DoS

TCP packets with some options of zero langth causes system to hang...

EEYE: Symantec Multiple Firewall TCP Options Denial of Service

Symantec Multiple Firewall TCP Options Denial of Service Release Date: April 23, 2004 Date Reported: March 9th, 2004 Severity: High Remote Denial of Service Vendor: Symantec Systems Affected: Symantec Norton Internet Security 2003 Symantec Norton Internet Security 2004 Symantec Norton Internet...

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass

Symantec Norton AntiVirus 2002 - Nested File Manual Scan Bypass source: https://www.securityfocus.com/bid/10164/info A vulnerability has been reported in Symantec Norton AntiVirus 2002 that may potentially cause deeply nested files with specific names to bypass manual scanning. This could permit...

CVE-2004-0217

The LiveUpdate capability liveupdate.sh in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log...

Symantec Security Check Virus Detection - COM Object Denial of Service

source: https://www.securityfocus.com/bid/10069/info Symantec Virus Detection is a web based service that detects viruses and trojan horses. It is a freely available service that can be run via Microsoft Internet Explorer, Netscape Communicator or Apple Safari web browsers. The...

[Full-Disclosure] Symantec Virus Detection(Free ActiveX) - Remote Buffer Overflow

Application: Symantec Virus DetectionFree ActiveX Vendors: http://security.symantec.com/sscv6/vcscan.asp?langid=ie&venid=sym&plfid=23&pkj=WJDORSJRFSKLUKUMXCC&vcscanstate=2 Platforms: Windows Bug: Buffer Overflow Risk: High - Running Arbitary Code Exploitation: Remote with browser Date: 1 Apr 2004...