CVE-2006-6490

Multiple buffer overflows in the SupportSoft 1 SmartIssue tgctlsi.dll and 2 ScriptRunner tgctlsr.dll ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HT...

CVE-2006-6490

The CVE-2006-6490 issue affects Symantec/Norton consumer products that ship the SupportSoft ActiveX controls SmartIssue tgctlsi.dll and ScriptRunner tgctlsr.dll. The vulnerability is described as multiple stack/heap buffer overflows in these ActiveX controls, which could allow remote code executi...

VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-002 Advisory Title: Palm OS Treo Find Feature System Password Bypass Authors: J.R. Wikes, Matt Cooley, & Scott King Release Date: 14-02-2007...

Symantec Veritas NetBackup CONNECT_OPTIONS Request Buffer Overflow (CVE-2006-5822)

Symantec Veritas NetBackup Server is a client/server backup application solution used for performing scheduled automatic backups and on-demand backups requested by users. The vulnerability is due to a boundary error in the NetBackup service. An attacker can exploit this issue by sending a...

Microsoft Word 2003未明代码执行漏洞

Microsoft Word是一款流行的办公文字处理程序。 Microsoft Word 2003存在未明问题，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 利用Microsoft Word漏洞，可导致在系统上执行任意指令。Symantec命名为Trojan.Mdropper.X。目前没有详细漏洞细节提供。 Microsoft Word 2003 Viewer Microsoft Word 2003 + Microsoft Office 2003 SP1 + Microsoft Office 2003 Microsoft Office 2003 SP2 Microsoft...

Multiple Symantec Web Security vulnerabilities

CPU exhaustion on large file submission. Crossite scripting...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Symantec Web Security SWS before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 error messages and 2 blocked page messages produced by SWS...

Design/Logic Flaw

The license registering interface in Symantec Web Security SWS before 3.0.1.85 allows attackers to cause a denial of service CPU consumption by submitting a large file...

CVE-2007-0563

Multiple cross-site scripting XSS vulnerabilities in Symantec Web Security SWS before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 error messages and 2 blocked page messages produced by SWS...

CVE-2007-0564

The license registering interface in Symantec Web Security SWS before 3.0.1.85 allows attackers to cause a denial of service CPU consumption by submitting a large file...

CVE-2007-0563

Symantec Web Security (SWS) is affected by CVE-2007-0563 due to multiple XSS vulnerabilities in versions prior to 3.0.1.85. The flaws allow remote attackers to inject arbitrary script or HTML via unspecified vectors related to error messages and blocked page messages produced by SWS. OpenVAS and ...

CVE-2007-0563

Multiple cross-site scripting XSS vulnerabilities in Symantec Web Security SWS before 3.0.1.85 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to 1 error messages and 2 blocked page messages produced by SWS...

CVE-2007-0564

The license registering interface in Symantec Web Security SWS before 3.0.1.85 allows attackers to cause a denial of service CPU consumption by submitting a large file...

CVE-2007-0564

Summary: CVE-2007-0564 affects Symantec Web Security (SWS) prior to version 3.0.1.85. The license registering interface can be abused to trigger a denial of service via submitting a large file, causing CPU consumption. Evidence/Details: The NVD entry specifies CPU consumption DoS with large file ...

Symantec Web Security多个拒绝服务和跨站脚本漏洞

Symantec Web Security安全产品不正确检查嵌入在HTML标记中，包含错误或者阻止页消息的返回给客户端的URL。 攻击者可以嵌入恶意命令到部分URL，客户端浏览器将执行恶意命令。目前没有详细漏洞细节提供。 Symantec Web Security 3.0.1 build 3.01.68 Symantec Web Security 3.0.1 build 3.01.67 Symantec Web Security 3.0.1 build 3.01.63 Symantec Web Security 3.0.1 build 3.01.62 Symantec Web...

PGP Desktop PGPserv Crafted Data Object Arbitrary Code Execution

The version of PGP Desktop installed on the remote host reportedly can allow a remote, authenticated user to execute arbitrary code on the affected host with LOCAL SYSTEM privileges. The issue arises because the software operates a service named 'PGPServ' or 'PGPsdkServ' that exposes a named pipe...

Symantec Antivirus Detection

Binary data 3891.prm...

Symantec AntiVirus Management Interface Remote Overflow (SYM06-010)

The remote antivirus is vulnerable to a remote stack-based buffer overflow attack. In order to exploit this issue, the attacker needs to send an overly-long COMFORWARDLOG message to the management interface of the product, which listens on port 2967. Successful exploitation of this issue will...