CVE-2002-1774: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus 2002 allows remote attackers to send viruses that bypass the e-mail scanning via a NULL character in the MIME header before the virus. NOTE: the vendor has disputed this issue, acknowledging that the initial scan is...

CVE-2002-1778: Undefined Security Weakness

Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a 1 SYN/FIN, 2 SYN/FIN/URG, 3 SYN/FIN/PUSH, or 4 SYN/FIN/URG/PUSH scan...

CVE-2002-1777: Undefined Security Weakness

NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus NAV 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is use...

CVE-2002-1779: Undefined Security Weakness

The "block fragmented IP Packets" option in Symantec Norton Personal Firewall 2002 NPW does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 CVE-2000-0305...

CVE-2005-1970

Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature...

CVE-2005-1970

Summary: CVE-2005-1970 affects Symantec pcAnywhere versions 10.5x and 11.x prior to 11.5, where enabling “Launch with Windows” allows a local user with physical access to gain elevated privileges via the Caller Properties feature. The Nessus entry specifies that manipulating Caller Properties can...

CVE-2005-1970

Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature...

CVE-2005-1970: Undefined Security Weakness

Symantec pcAnywhere 10.5x and 11.x before 11.5, with "Launch with Windows" enabled, allows local users with physical access to execute arbitrary commands via the Caller Properties feature...

Symantec PcAnywhere privilege escalation

By using "Caller Properties" it's possible to execute application with Local System privileges...

[SA15673] Symantec pcAnywhere Privilege Escalation Vulnerability

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2005-1867

Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges...

CVE-2005-1867

Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges...

CVE-2005-1867

The CVE-2005-1867 entry affects Symantec Brightmail AntiSpam prior to version 6.0.2 , where a hard-coded database administrator password enables remote attackers to gain privileges. This is described with an admin-privilege escalation risk and a high base score (CVSS v2: 7.5, NETWORK, LOW access ...

CVE-2005-1867: Undefined Security Weakness

Symantec Brightmail AntiSpam before 6.0.2 has a hard-coded database administrator password, which allows remote attackers to gain privileges...

Symantec Brightmail AntiSpam database unauthorized access

Static built-in password is used to access database...

[SA15562] Symantec Brightmail AntiSpam Static Database Password

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

CVE-2004-1910

The CVE-2004-1910 entry concerns rufsi.dll in Symantec Virus Detection. A remote attacker can cause a denial of service (crash) by supplying a long string to the GetPrivateProfileString function. The issue was originally reported as a buffer overflow, but that claim is disputed by the vendor, tho...

CVE-2003-1149

Cross-site scripting XSS vulnerability in Symantec Norton Internet Security 2003 6.0.4.34 allows remote attackers to inject arbitrary web script or HTML via a URL to a blocked site, which is displayed on the blocked sites error page...

CVE-2003-1149

The vulnerability CVE-2003-1149 affects Symantec Norton Internet Security 2003, specifically version 6.0.4.34. It is a cross-site scripting (XSS) flaw where a remote attacker can inject arbitrary script or HTML by supplying a crafted URL to a blocked-site page, which is then displayed on the bloc...

CVE-2004-1910

rufsi.dll in Symantec Virus Detection allows remote attackers to cause a denial of service crash via a long string to the GetPrivateProfileString function. NOTE: this issue was originally reported as a buffer overflow, but that specific claim is disputed by the vendor, although a crash is...