CVE-2003-1310

The CVE concerns Norton AntiVirus 2002 on Windows, specifically the DeviceIoControl path in the Norton Device Driver (NAVAP.sys). The vulnerability allows local privilege escalation by overwriting memory locations through certain IOCTL codes, enabling a non-privileged user to gain higher privileg...

CVE-2003-1310: Undefined Security Weakness

The DeviceIoControl function in the Norton Device Driver NAVAP.sys in Symantec Norton AntiVirus 2002 allows local users to gain privileges by overwriting memory locations via certain control codes aka "Device Driver Attack"...

Symantec Automated Support Assistant ActiveX control buffer overflow

Overview The Symantec Automated Support Assistant ActiveX control contains a buffer overflow, which may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description The Symantec Automated Support Assistant control is an ActiveX control that comes with...

Symantec Enterprise Security Manager拒绝服务漏洞

Symantec Enterprise Security Manager（ESM）可以在整个企业范围内为关键性应用程序和服务器自动搜索发现其漏洞隐患和不符合安全策略的设定。 如果能够模拟为ESM代理向管理器服务器发送特制的请求的话，就会导致ESM管理器和代理都锁定，必须重启才能恢复正常运行。 Symantec Enterprise Security Manager 6.5.2 Symantec Enterprise Security Manager 6.5.1 Symantec Enterprise Security Manager 6.5 Symantec Enterprise...

Solaris 7 (sparc) : 119007-01

NetBackup 5.1 UNIX server and client fix. Date this patch was last updated by Sun : Nov/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 119007-01

NetBackup 5.1 UNIX server and client fix. Date this patch was last updated by Sun : Nov/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Sun Solaris 10 - UFS Local Denial of Service

Sun Solaris 10 - UFS Local Denial of Service source: https://www.securityfocus.com/bid/20919/info Sun Solaris 10 is prone to a local denial-of-service vulnerability. This issue affects the UFS filesystem-handling code. An attacker can exploit this issue to crash the affected computer, denying...

Symantec On-Demand Protection加密数据信息泄露漏洞

Symantec On-Demand Agent（SODA）和Symantec On-Demand Protection（SODP）可为基于WEB的应用和服务提供虚拟桌面环境。 本地攻击者可以解密Symantec On-Demand虚拟桌面环境所加密的文件，访问文件中的数据。攻击的具体影响取决于所加密文件的内容。 Symantec SODP 2.6 build 2232 Symantec SODA 2.5 MR2 build 2156 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： https://support.sygate.com/...

PCAnywhere CIF文件本地权限提升漏洞

Symantec PCAnywhere是全球最畅销的用于管理服务器和提供管理人员支持的远程控制解决方案。 PCAnywhere的CIF文件可能包含有超级用户标签，而这个文件默认下不安全的存储在了“Documents and Settings\All Users\Application Data\Symantec\pcAnywhere\Hosts\”，导致任何用户都可以读取文件内容并创建新文件。 攻击者可以创建新的CIF文件，设置超级用户标签，并将其放置在Hosts目录中，这样用户登录到PCAnywhere时就会获得管理员权限。 Symantec pcAnywhere 12.5...

Symantec自动支持助手ActiveX控件缓冲区溢出漏洞

Symantec自动支持助手是很多Symantec产品中所捆绑的ActiveX控件，用于识别Symantec用户产品中的问题。 Symantec自动支持助手ActiveX控件没有正确地验证外部输入，可能导致栈溢出并以运行浏览器用户的权限执行任意指令。 成功的攻击要求攻击者能够伪装成为可信任的Web站点并诱骗用户点击恶意的链接。 Symantec Norton AntiVirus 2006 Symantec Norton AntiVirus 2005 Symantec Norton Internet Security 2006 Symantec Norton Internet Securi...

Symantec AntiVirus IOCTL内核权限提升漏洞

Symantec AntiVirus是非常流行的杀毒解决方案。 Symantec AntiVirus的NAVEX15.SYS和NAVENG.SYS设备驱动的IOCTL处理器没有充分地验证地址空间，允许攻击者使用常数的双字值覆盖任意内存。 如果攻击者能够向0x222AD3、0x222AD7和0x222ADB IOCTL处理器发送特制的I/O请求报文的话，就会导致以内核权限执行任意指令。 Symantec AntiVirus 所有版本 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.symantec.com/...

CVE-2006-5545

Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allows remote attackers to use the product as a spam relay...

CVE-2006-5545

Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allows remote attackers to use the product as a spam relay...

CVE-2006-5545

CVE-2006-5545 affects Symantec Mail Security for Domino (Premium Antispam) on Domino Server 5.1.x. The vulnerability: the Premium Antispam feature does not filter certain SMTP recipient address formats, enabling remote attackers to relay spam through the remote host. Public sources reference vuln...

Symantec Product Security: Symantec Device Driver Elevation of Privileg

Symantec Product Security Advisory October 23, 2006 SYM06-022 Symantec Device Driver Elevation of Privilege Risk Impact: Medium Remote Access: No Local Access: Yes Authentication Required: Yes Exploit available: No Overview Symantec was notified of a vulnerability in a device driver which, if...

Symantec AntiVirus privilege escalation

Insufficient address checks in SAVRT, NAVENG and NAVEX15 devices IOCTLS calls allos to overwrite kernel memory...

CVE-2006-5545: Undefined Security Weakness

Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allows remote attackers to use the product as a spam relay...

Symantec AntiVirus SAVRT.SYS驱动本地权限提升漏洞

Symantec AntiVirus是非常流行的杀毒解决方案。 Symantec AntiVirus的SAVRT.SYS驱动在处理输入缓冲区时存在漏洞，本地攻击者可能利用此漏洞提升权限或导致拒绝服务。 由于没有正确的验证输出缓冲区的地址空间，Symantec的SAVRT.SYS中的安全漏洞可能允许恶意用户使用DeviceIOControl的输出缓冲区覆盖内核地址。成功利用这个漏洞可能允许本地攻击者以提升的权限执行任意指令或导致系统崩溃。 Symantec Client Security = 2.0.3 Symantec Client Security 1.1 Symantec...

Symantec Mail Security for Domino邮件中继漏洞

Symantec Mail Security for Domino为Domino服务器提供高性能的集成邮件保护功能，使其能够防御病毒威胁、垃圾邮件和不受欢迎的内容。 Symantec Mail Security for Domino在处理特定格式邮件的中继时存在漏洞，此漏洞可能被垃圾邮件发送者利用来隐蔽自己。 Symantec Mail Security for Domino的Premium...

Symantec Norton个人防火墙SymEvent驱动本地拒绝服务漏洞

Symantec Norton个人防火墙是非常流行的防火墙软件。 Symantec Norton个人防火墙的实现上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Norton没有充分地保护 \Device\SymEvent 驱动，也没有验证其输入缓冲区，允许Everyone向这个驱动中写入数据，可能导致驱动执行无效的内存操作以及整个操作系统崩溃。 Symantec Norton Personal Firewall 2006 9.1.0.33 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...