6184 matches found
CVE-2006-4128
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 all builds, Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and...
CVE-2006-4128
The CVE-2006-4128 issue affects Symantec VERITAS Backup Exec products (Backup Exec for Windows Server and Remote Agent, Backup Exec Continuous Protection Server Remote Agent, and related Netware/Remote Agents) with multiple heap-based buffer overflows exposed via crafted RPC messages. The vulnera...
CVE-2006-4128
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 all builds, Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and...
Symantec Backup Exec buffer overflow
Buffer overflow in internal RPC-based protocol...
(Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow
Any further revisions to this information, if required, will be posted to the official advisory located at : http://www.symantec.com/avcenter/security/Content/2006.08.11.html Symantec Security Advisory SYM06-014 BID 19479 11 August 2006 Symantec Backup Exec for Windows Server: RPC Interface Heap...
CVE-2006-4128: Undefined Security Weakness
Multiple heap-based buffer overflows in Symantec VERITAS Backup Exec for Netware Server Remote Agent for Windows Server 9.1 and 9.2 all builds, Backup Exec Continuous Protection Server Remote Agent for Windows Server 10.1 builds 10.1.325.6301, 10.1.326.1401, 10.1.326.2501, 10.1.326.3301, and...
Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability
Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue stems from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...
CVE-2006-4013
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in 1 DATABLOB-GET and 2 DATABLOB-SAVE...
CVE-2006-4014
Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service application freeze "by sending invalid posts"...
CVE-2006-4013
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in 1 DATABLOB-GET and 2 DATABLOB-SAVE...
CVE-2006-4014
CVE-2006-4014 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is allowed to connect from any machine, remote attackers can trigger a denial of service (application freeze) by sending invalid posts. The public details specify the vulnerability class and affected...
CVE-2006-4013
CVE-2006-4013 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is accessible from any computer, remote attackers can exploit directory traversal in the DATABLOB-GET and DATABLOB-SAVE requests to read and overwrite files. The vulnerability enables remote access w...
CVE-2006-4014
Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service application freeze "by sending invalid posts"...
CVE-2006-4014: Undefined Security Weakness
Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service application freeze "by sending invalid posts"...
CVE-2006-4013: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in 1 DATABLOB-GET and 2 DATABLOB-SAVE...
CVE-2006-3457
Symantec On-Demand Agent SODA before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection SODP before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an...
CVE-2006-3457: Undefined Security Weakness
Symantec On-Demand Agent SODA before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection SODP before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an...
CVE-2006-3457
CVE-2006-3457 affects Symantec On-Demand Agent (SODA) up to 2.5 MR2 Build 2157 and the Virtual Desktop module in Symantec On-Demand Protection (SODP) up to 2.6 Build 2233. The issue: files encrypted by policy-based automatic encryption can potentially be decrypted by a local attacker via an unspe...
CVE-2006-3457
Symantec On-Demand Agent SODA before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection SODP before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an...