Проблемы с Symantec Live Update

При обновлении не проверяются сигнатуры файлов, что позволяет подменить файлы с обновлениями...

CVE-2001-1126

Symantec LiveUpdate 1.4 through 1.6, and possibly later versions, allows remote attackers to cause a denial of service flood via DNS spoofing of the update.symantec.com site...

CVE-2001-1125

Symantec LiveUpdate before 1.6 does not use cryptography to ensure the integrity of download files, which allows remote attackers to execute arbitrary code via DNS spoofing of the update.symantec.com site...

CVE-2001-0645

Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to 1 access to the management tier via the "admin" password, or 2 connect to a MySQL ODBC from the management tier using a blank password...

CVE-2001-0645

CVE-2001-0645 affects Symantec/AXENT NetProwler 3.5.x. The provided materials indicate the presence of several default passwords that could permit an attacker to (1) access the management tier via the admin password, and (2) connect to a MySQL ODBC from the management tier using a blank password....

CVE-2001-0549

Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords...

CVE-2001-0598

Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled...

CVE-2001-0599

Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to port 2638...

CVE-2001-0598

Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large 45Kb amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled...

CVE-2001-0599

Sybase Adaptive Server Anywhere Database Engine (version 6.0.3.2747 and earlier, as included with Symantec Ghost 6.5) is affected. A remote attacker can trigger a denial of service by sending large (>45 KB) amounts of data to port 2638. The provided connected documents do not include further e...

CVE-2001-0598

CVE-2001-0598 affects Symantec Ghost 6.5 and earlier. A remote attacker can cause a denial of service by sending large (>45 KB) data to the Ghost Configuration Server on port 1347, triggering an unhandled error. Public details confirm the vulnerable component is the Ghost Configuration Server,...

Symantec LiveUpdate stores proxy server passwords in plaintext in registry

Overview A vulnerability exists in the way Symantec LiveUpdate stores proxy server passwords which could allow local users to have read access to the key. Description LiveUpdate version 1.5 stores proxy server passwords in clear text in the registry, under...

Raptor Firewall 4.0/5.0/6.0.x - Zero Length UDP Packet Resource Consumption

source: https://www.securityfocus.com/bid/3509/info Raptor Firewall is a commercially available firewall implementation distributed by Symantec. A problem with the handling of UDP packets by the firewall has been discovered. When the firewall receives zero length UDP packets, the machine hosting...

DoS против Symantec Ghost (buffer overflow)

Переполнение буфера при длинном запросе в порт 2638...

def-2001-21: Ghost Multiple DoS

====================================================================== Defcom Labs Advisory def-2001-21 Ghost Multiple DoS Author: Peter Grьndl [email protected] Release Date: 2001-04-11 ====================================================================== ------------------------=Brief...

scx-sa-14.txt

============================================================================= Securax-SA-14 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: Symantec pcAnywhere 9.0 DoS / Buffer Overflow Announced: 2001-02-08...

Symantec pcAnywhere 9.0 DoS / Buffer Overflow

============================================================================= Securax-SA-14 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: Symantec pcAnywhere 9.0 DoS / Buffer Overflow Announced: 2001-02-08...

Vulnerabilities in Norton Antivirus for Exchange

Norton Antivirus for Exchange NavExchange, a product of Symantec, suffers from two major problems, with impact described below. The system tested was version 1.5. The most recent version is 2.0, which I have not had the opportunity to test, but based on information from Symantec I believe 2.0 is...

CVE-1999-0842

Symantec Mail-Gear 1.0 web interface server allows remote users to read arbitrary files via a .. dot dot attack...

CVE-1999-0842

CVE-1999-0842 affects the Symantec Mail-Gear 1.0 web interface server. The issue allows remote attackers to read arbitrary files via a .. (dot dot) path traversal, due to improper validation of file paths. The provided documents do not include specific exploit details or a confirmed remediation; ...