Symantec Backup Exec buffer overflow

Buffer overflow in internal RPC-based protocol...

(Security Advisory) SYM06-014 Symantec Backup Exec Internal RPC Overflow

Any further revisions to this information, if required, will be posted to the official advisory located at : http://www.symantec.com/avcenter/security/Content/2006.08.11.html Symantec Security Advisory SYM06-014 BID 19479 11 August 2006 Symantec Backup Exec for Windows Server: RPC Interface Heap...

Microsoft Internet Explorer COM Object Instantiation Code Execution Vulnerability

Description Microsoft Internet Explorer is prone to a memory-corruption vulnerability that is related to the instantiation of COM objects. This issue stems from a design error. The vulnerability arises because of the way Internet Explorer tries to instantiate certain COM objects as ActiveX...

CVE-2006-4013

Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in 1 DATABLOB-GET and 2 DATABLOB-SAVE...

CVE-2006-4014

Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service application freeze "by sending invalid posts"...

CVE-2006-4014

Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allows remote attackers to cause a denial of service application freeze "by sending invalid posts"...

CVE-2006-4013

Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in 1 DATABLOB-GET and 2 DATABLOB-SAVE...

CVE-2006-4013

CVE-2006-4013 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is accessible from any computer, remote attackers can exploit directory traversal in the DATABLOB-GET and DATABLOB-SAVE requests to read and overwrite files. The vulnerability enables remote access w...

CVE-2006-4014

CVE-2006-4014 affects Symantec Brightmail AntiSpam (SBAS) prior to 6.0.4. When the Control Center is allowed to connect from any machine, remote attackers can trigger a denial of service (application freeze) by sending invalid posts. The public details specify the vulnerability class and affected...

CVE-2006-3457

Symantec On-Demand Agent SODA before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection SODP before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an...

CVE-2006-3457

CVE-2006-3457 affects Symantec On-Demand Agent (SODA) up to 2.5 MR2 Build 2157 and the Virtual Desktop module in Symantec On-Demand Protection (SODP) up to 2.6 Build 2233. The issue: files encrypted by policy-based automatic encryption can potentially be decrypted by a local attacker via an unspe...

CVE-2006-3457

Symantec On-Demand Agent SODA before 2.5 MR2 Build 2157, and the Virtual Desktop module in Symantec On-Demand Protection SODP before 2.6 Build 2233, do not properly encrypt files that are subject to policy-based automatic encryption, which might allow local users to read sensitive data via an...

Symantec On-Demand Agent / Symantec On-Demand Protection protection bypass

It's possible to access encrypted data...

SYM06-013 Symantec On-Demand Protection Encrypted Data Exposure

SYM06-013 August 1, 2006 Symantec On-Demand Protection Encrypted Data Exposure Revision History None Risk Impact Medium Remote No Local Yes Authentication Required No Exploit publicly available No Overview Symantec On-Demand Agent SODA and Symantec On-Demand Protection SODP provide a Virtual...

Symantec On-Demand Protection Encrypted Data Exposure

SUMMARY Symantec On-Demand Agent SODA and Symantec On-Demand Protection SODP provide a Virtual Desktop environment to secure Web-based applications and services. Files created while in the virtual desktop are encrypted as they are saved to a hard drive or removable media, if that option is enable...

[SA21223] Symantec Brightmail AntiSpam Multiple Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

Symantec Brightmail AntiSpam multiple security vulnerabilities

It's possible to DoS system and access system files if control center access is enabled from any computer...

Symantec Brightmail AntiSpam Multiple Vulnerabilities

SUMMARY Multiple vulnerabilities have been reported in Symantec Brightmail AntiSpam. Confidential system information can be read or modified by combining these issues. Risk Impact Medium Remote | Yes ---|--- Local | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS...

SYMSA-2006-008:Password Safe - Lock Password Database Configuration Not Enforced

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2006-008 Advisory Title: Password Safe - Lock Password Database Configuration Not Enforced Author: J.R. Wikes Release Date: 07-24-2006 Application:...

CVE-2006-3784

Symantec pcAnywhere 12.5 uses weak default permissions for the "Symantec\pcAnywhere\Hosts" folder, which allows local users to gain privileges by inserting a superuser .cif aka caller or CallerID file into the folder, and then using a pcAnywhere client to login as a local administrator...