5333 matches found
CVE-2007-5126
Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...
CVE-2007-5126
Technical details about CVE-2007-5126 are not publicly available in the provided connected documents; no specific affected products, versions, impact, or remediation are disclosed. Monitor for updates.
CVE-2007-5126
Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...
Symantec Norton NavComUI ActiveX control vulnerability
Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...
Symantec Norton NavComUI ActiveX control vulnerability
Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...
Symantec Norton NavComUI ActiveX control vulnerability
Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...
Symantec Norton NavComUI ActiveX control vulnerability
Added: 09/20/2007 CVE: CVE-2007-2955 BID: 24983 OSVDB: 36477 Background The Symantec Norton product suite includes antivirus, firewall, and other security functions. Problem Vulnerabilities in the AxSysListView32 and AxSysListView32OAA ActiveX controls, implemented by the NavComUI.dll library...
SYMSA-2007-009: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-009 Advisory Title: RemoteDocs R-Viewer Code Execution and Sensitive Information Disclosure Author: Adam Baldiwn / [email protected]...
SYMSA-2007-008: Autodesk Backburner 3.0.2 System Backdoor
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Consulting Services www.symantec.com Security Advisory Advisory ID: SYMSA-2007-008 Advisory Title: Autodesk Backburner 3.0.2 : System Backdoor Author: Dave Hartley and Stephen Kapp [email protected] Release Date: 12-09-2007 Application...
Symantec Antivirus privilege escalation
It's possible to overwrite system memory regions with IOCTL 0x83022323 of symTDI device...
Symantec Product Security: Symantec Device Driver Local Elevation of Privilege
SYM07-024 September 05, 2007 Symantec SYMTDI.SYS Device Driver Local Denial of Service Revision History: None Risk Impact: Low Remote Access: No Local Access: Yes Authentication Required: Yes, to the local system Exploit available: No Overview Some versions of Symantec’s device driver SYMTDI.SYS...
Symantec SYMTDI.SYS Device Driver Local Denial of Service
SUMMARY Some versions of Symantecs device driver SYMTDI.SYS contain a vulnerability which, if successfully exploited, could allow a local attacker to cause the system to crash. Risk Impact Low Remote Access | No ---|--- Local Access | Yes Authentication Required | Yes, to the local system Exploit...
Symantec企业防火墙用户名枚举漏洞
BUGTRAQ ID: 25338 Symantec Enterprise Firewall（SEP）是一个高性能防火墙解决方案，适用于WINDOWS和SOLARIS操作系统。 SEP在处理某种认证请求时存在漏洞，远程攻击者可能利用此漏洞暴力猜测有效的用户名。 如果对Symantec企业防火墙配置了使用预共享密钥（PSK）认证的远程访问（客户端到网关）VPN的话，就会对有效和无效用户名提供不同的响应。这就允许攻击者判断所猜测的用户名是否有效，但不会列出有效的用户名，仅可以确定所提供的用户名是否存在。 Symantec Enterprise Firewall 6.x 临时解决方法：...
Authentication flaw
The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key PSK authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...
CVE-2007-4422
The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key PSK authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...
CVE-2007-4422
CVE-2007-4422 affects Symantec Enterprise Firewall 6.x: the login interface used with a VPN using pre-shared key (PSK) authentication leaks information by returning different responses for valid vs invalid usernames, enabling remote username enumeration. The available connected documents confirm ...
CVE-2007-4422
The login interface in Symantec Enterprise Firewall 6.x, when a VPN with pre-shared key PSK authentication is enabled, generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...
Mercury Mail Transport System AUTH CRAM-MD5 Buffer Overflow Vulnerability
Description Mercury Mail Transport System is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks when handling AUTH CRAM-MD5 requests. Attackers can exploit this issue to execute arbitrary code with the privileges of the user running th...
Altiris Deployment Solution Aclient Process (aclient.exe) Log File Viewer Local Privilege Escalation
The version of the Altiris Client Agent aclient installed on the remote host reportedly contains a flaw whereby local users can use the Log File Viewer to open or execute files on the affected host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...