CVE-2006-5545

Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allows remote attackers to use the product as a spam relay...

CVE-2006-5545

Premium Antispam in Symantec Mail Security for Domino Server 5.1.x before 5.1.2.28 does not filter certain SMTP address formats, which allows remote attackers to use the product as a spam relay...

CVE-2006-5545

CVE-2006-5545 affects Symantec Mail Security for Domino (Premium Antispam) on Domino Server 5.1.x. The vulnerability: the Premium Antispam feature does not filter certain SMTP recipient address formats, enabling remote attackers to relay spam through the remote host. Public sources reference vuln...

Symantec Product Security: Symantec Device Driver Elevation of Privileg

Symantec Product Security Advisory October 23, 2006 SYM06-022 Symantec Device Driver Elevation of Privilege Risk Impact: Medium Remote Access: No Local Access: Yes Authentication Required: Yes Exploit available: No Overview Symantec was notified of a vulnerability in a device driver which, if...

Symantec AntiVirus privilege escalation

Insufficient address checks in SAVRT, NAVENG and NAVEX15 devices IOCTLS calls allos to overwrite kernel memory...

Symantec Mail Security for Domino邮件中继漏洞

Symantec Mail Security for Domino为Domino服务器提供高性能的集成邮件保护功能，使其能够防御病毒威胁、垃圾邮件和不受欢迎的内容。 Symantec Mail Security for Domino在处理特定格式邮件的中继时存在漏洞，此漏洞可能被垃圾邮件发送者利用来隐蔽自己。 Symantec Mail Security for Domino的Premium...

Symantec Norton个人防火墙SymEvent驱动本地拒绝服务漏洞

Symantec Norton个人防火墙是非常流行的防火墙软件。 Symantec Norton个人防火墙的实现上存在漏洞，本地攻击者可能利用此漏洞对系统执行拒绝服务攻击。 Norton没有充分地保护 \Device\SymEvent 驱动，也没有验证其输入缓冲区，允许Everyone向这个驱动中写入数据，可能导致驱动执行无效的内存操作以及整个操作系统崩溃。 Symantec Norton Personal Firewall 2006 9.1.0.33 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Symantec AntiVirus SAVRT.SYS驱动本地权限提升漏洞

Symantec AntiVirus是非常流行的杀毒解决方案。 Symantec AntiVirus的SAVRT.SYS驱动在处理输入缓冲区时存在漏洞，本地攻击者可能利用此漏洞提升权限或导致拒绝服务。 由于没有正确的验证输出缓冲区的地址空间，Symantec的SAVRT.SYS中的安全漏洞可能允许恶意用户使用DeviceIOControl的输出缓冲区覆盖内核地址。成功利用这个漏洞可能允许本地攻击者以提升的权限执行任意指令或导致系统崩溃。 Symantec Client Security = 2.0.3 Symantec Client Security 1.1 Symantec...

CVE-2006-3455

The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function...

CVE-2006-3455

The SAVRT.SYS device driver, as used in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3, allows local users to execute arbitrary code via a modified address for the output buffer argument to the DeviceIOControl function...

CVE-2006-3455

The vulnerability CVE-2006-3455 affects the SAVRT.SYS device driver in Symantec AntiVirus Corporate Edition 8.1 and 9.0.x up to 9.0.3, and Symantec Client Security 1.1 and 2.0.x up to 2.0.3. A local attacker can execute arbitrary code by supplying a crafted address for the DeviceIOControl output ...

Symantec Device Driver Elevation of Privilege

SUMMARY Symantec was notified of a vulnerability in a device driver which, if successfully exploited, could allow a local attacker to execute arbitrary code with elevated privileges or to crash the system. Risk Impact Medium Remote | No ---|--- Local | Yes Authentication Required | Yes Exploit...

Symantec Mail Security for Domino Server Relay

SUMMARY Premium Antispam feature of Symantec Mail Security for Domino is vulnerable to allowing a Domino server to be used as an unintended mail relay. This could be used to relay SPAM mail anonymously. Severity Medium can be used to send SPAM Remote | Yes ---|--- Local | No Authentication Requir...

CVE-2006-5403

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via...

CVE-2006-5404

Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors...

CVE-2006-5404

Unspecified vulnerability in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to obtain sensitive information via unspecified vectors...

CVE-2006-5404

CVE-2006-5404 involves an unspecified vulnerability in an ActiveX control used by the Symantec Automated Support Assistant, deployed in Norton AntiVirus, Internet Security, and System Works 2005/2006. The vulnerability allows user‑assisted remote attackers to obtain sensitive information via unsp...

CVE-2006-5403

The CVE-2006-5403 issue is a stack-based buffer overflow in the Symantec Automated Support Assistant ActiveX control (used in Norton Antivirus/Internet Security/System Works). The CERT entry notes the vulnerable ActiveX control is locked to the symantec.com domain, requiring a user to view a craf...

CVE-2006-5403

Stack-based buffer overflow in an ActiveX control used in Symantec Automated Support Assistant, as used in Norton AntiVirus, Internet Security, and System Works 2005 and 2006, allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via...

CVE-2006-4927

The a NAVENG NAVENG.SYS and b NAVEX15 NAVEX15.SYS device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions 1 0x222AD3, 2 0x222AD7, and 3...