CVE-2006-6222: Undefined Security Weakness

Stack-based buffer overflow in the NetBackup bpcd daemon bpcd.exe in Symantec Veritas NetBackup 5.0 before 5.0MP7, 5.1 before 5.1MP6, and 6.0 before 6.0MP4 allows remote attackers to execute arbitrary code via a long request with a malformed length prefix...

Veritas NetBackup BPCD守护程序多个远程安全漏洞

Veritas NetBackup是大型的数据备份应用系统。 Veritas NetBackup的bpcd.exe在解析提交给NetBackup Master/Media Server的超长请求时存在栈溢出漏洞，如果发送给这个进程的通讯前缀为畸形长度的话，就会触发这个溢出，导致执行任意指令。 bpcd.exe在解析提交给NetBackup Master/Media Server的超长CONNECTOPTIONS请求时存在另一个栈溢出。在解析过程中，未经长度检查便执行了拷贝操作，导致执行任意指令。...

Multiple Symantec Veritas NetBackup security vulnerabilities

CONNECTOPTIONS and oversized requests to bpcd.exe buffer overflows...

ZDI-06-050: Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability

ZDI-06-050: Symantec Veritas NetBackup CONNECTOPTIONS Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-050.html December 13, 2006 -- CVE ID: CVE-2006-5822 -- Affected Vendor: Symantec -- Affected Products: Veritas NetBackup 6.0 MP4 Veritas NetBackup 5.1 MP6 Veritas...

ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability

ZDI-06-049: Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-049.html December 13, 2006 -- CVE ID: CVE-2006-6222 -- Affected Vendor: Symantec -- Affected Products: Veritas NetBackup 6.0 MP4 Veritas NetBackup 5.1 MP6 Veritas...

CVE-2006-5822: Undefined Security Weakness

Stack-based buffer overflow in the NetBackup bpcd daemon bpcd.exe in Symantec Veritas NetBackup 5.0 before 5.0MP7, 5.1 before 5.1MP6, and 6.0 before 6.0MP4 allows remote attackers to execute arbitrary code via a long CONNECTOPTIONS request, a different issue than CVE-2006-6222...

CVE-2006-4902: Undefined Security Weakness

The NetBackup bpcd daemon bpcd.exe in Symantec Veritas NetBackup 5.0 before 5.0MP7, 5.1 before 5.1MP6, and 6.0 before 6.0MP4 does not properly check for chained commands, which allows remote attackers to execute arbitrary commands by appending malicious commands to valid commands...

Symantec Veritas NetBackup CONNECT_OPTIONS Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Symantec Veritas NetBackup. Authentication is not required to exploit this vulnerability. The specific flaw exists within bpcd.exe during the parsing of overly long CONNECTOPTIONS requests to a NetBackup...

Symantec Veritas NetBackup Long Request Buffer Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Symantec Veritas NetBackup. Authentication is not required to exploit this vulnerability. The specific flaw exists within bpcd.exe during the parsing of overly long requests to a NetBackup Master/Media...

Symantec NetBackup PureDisk验证绕过漏洞

Symantec Veritas NetBackup PureDisk Remote Office Edition是一款备份解决方案。 Symantec Veritas NetBackup PureDisk Remote Office Edition存在验证绕过问题，远程攻击者可以利用漏洞对系统的管理员访问，导致控制整个系统。 Symantec Veritas NetBackup PureDisk管理接口存在特权提升问题，管理接口只能通过SSL WEB连接，但是能访问网络和运行此管理程序主机的非特权用户，可绕过管理接口验证并提升特权，导致完全控制系统，目前没有详细漏洞细节提供。...

Symantec Norton个人防火墙SuiteOwners注册表键值安全绕过漏洞

Symantec Norton Personal Firewall是一款流行的个人桌面防火墙。 Symantec Norton Personal Firewall不正确的注册表键值保护，远程攻击者可以利用漏洞绕过安全保护，装载任意文件等，导致特权提升。...

Symantec Backup Exec多个堆溢出漏洞

Symantec Backup Exec Remote Agent是一款备份解决方案。 Netware Servers版本下的Symantec Backup Exec不正确验证和过滤用户输入，远程攻击者可以利用漏洞进行堆破坏攻击，可导致拒绝服务或执行任意指令。 Backup Exec 9.1 and 9.2 for Netware Servers Remote Agent for Windows Servers存在这些漏洞，根据报告Backup Exec for Windows Servers, Backup Exec Continuous Protection Server CPS...

SYMSA-2006-012: 2X ThinClientServer Create Admin Account Replay Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2006-012 Advisory Title: 2X ThinClientServer Create Admin Account Replay Vulnerability Author: Oliver Karow / [email protected] Release Date:...

CVE-2006-6308

Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that...

CVE-2006-6308

Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that...

CVE-2006-6308

Symantec LiveState 7.1 Agent for Windows is affected. Local users can potentially gain privileges by stopping the shstart.exe process and selecting Web Self-Service from the system tray, which opens a browser window running with elevated privileges. The root cause is the browser window inheriting...

CVE-2006-6308: Undefined Security Weakness

Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that...

Symantec LiveState Agent privilege escalation

It's possible to launch Windows Explorer with SYSTEM privileges...

Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation

hello, we've found local privilege escalation in Symantec LiveState agent. PoC: 1. kill shstart.exe process 2. from symantec livestate agent icon in systray choose "Web Self-Service" 3. New browser window will open, it is running with SYSTEM privileges. tested on fully patched Win XP SP2, Symante...

CVE-2003-1310

The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...