CVE-2005-2758

CVE-2005-2758 affects Symantec AntiVirus Scan Engine (administrative web interface). The vulnerability is a buffer overflow caused by insufficient validation of HTTP header input, allowing remote code execution when a crafted request is sent to the web service port (default 8004) on affected vers...

CVE-2005-2758

Integer signedness error in the administrative interface for Symantec AntiVirus Scan Engine 4.0 and 4.3 allows remote attackers to execute arbitrary code via crafted HTTP headers with negative values, which lead to a heap-based buffer overflow...

[Full-disclosure] iDEFENSE Security Advisory 10.04.05: Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability

Symantec AntiVirus Scan Engine Web Service Buffer Overflow Vulnerability iDEFENSE Security Advisory 10.04.05 www.idefense.com/application/poi/display?id=314&type=vulnerabilities October 4, 2005 I. BACKGROUND Symantec Scan Engine is a TCP/IP server and programming interface that enables third...

Symantec Antivirus administrative interface buffer overflow

Buffer overflow during TCP/8004 administrative interface HTTP request parsing...

Symantec Antivirus Scan Engine: Web Service Administrative Interface Buffer Overflow

SUMMARY The remote exploitation of a buffer overflow vulnerability in the web-based Administrative Interface of the Symantec AntiVirus Scan Engine product could potentially allow remote attackers to execute arbitrary code on a targeted system Risk Impact HIGH Remote Access | Yes ---|--- Local...

VERITAS StorageCentral DCOM servers contain multiple buffer overflows

Overview VERITAS StorageCentral DCOM servers contains several buffer overflows, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description VERITAS StorageCentral is software package that performs storage management. Multiple DCOM server components provided by...

VERITAS Storage Exec DCOM servers contain multiple buffer overflows

Overview VERITAS Storage Exec contains several buffer overflows, which may allow a remote attacker to execute arbitrary code on a vulnerable system. Description VERITAS Storage Exec is software package that performs storage management. Multiple DCOM server components provided by Storage Exec...

Symantec Brightmail AntiSpam: winmail.dat File, Denial of Service

SUMMARY Risk Impact Low Remote Access | Yes incoming mail ---|--- Local Access | No Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Build | Platform | Solution ---|---|---|---|--- Symantec Brightmail AntiSpam | 6.0 | 1 | RedHat Linux | Update...

Symantec Brightmail AntiSpam: Nested Zip File, Denial of Service

SUMMARY Risk Impact Low Remote Access | Yes incoming mail ---|--- Local Access | No Authentication Required | No Exploit publicly available | NA AFFECTED PRODUCTS Product | Version | Build | Solution ---|---|---|--- Symantec Brightmail AntiSpam | 6.0 | 1 | Update Symantec Brightmail AntiSpam | 6....

Brightmail Control Center Default Password (symantec) for 'admin' Account

The remote host is running Symantec's Brightmail Control Center, a web-based administration tool for Brightmail AntiSpam. The installation of Brightmail Control Center on the remote host still has an account 'admin' with the default password 'symantec'. An attacker can exploit this issue to gain...

Symantec Brightmail Antispam DoS

CPU exhaustion on deeply neted archives, crash on TNEF messages processing...

Symantec Brightmail AntiSpam Denial of Service Vulnerabilities

Secunia Advisory: SA16733 Release Date: 2005-09-07 Critical: Moderately critical Impact: DoS Where: From remote Solution Status: Vendor Patch Software: Symantec Brightmail AntiSpam 6.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it. Description:...

CVE-2005-2766

Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password to the internal...

CVE-2005-2766

Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x, and possibly other versions, when obtaining updates from an internal LiveUpdate server, stores sensitive information in cleartext in the Log.Liveupdate log file, which allows attackers to obtain the username and password to the internal...

CVE-2005-2766

The CVE affects Symantec AntiVirus Corporate Edition 9.0.1.x and 9.0.4.x (and possibly other versions) where, during updates from an internal LiveUpdate server, the Log.Liveupdate file stores the LiveUpdate username and password in cleartext. This plaintext credential exposure could allow an atta...

symantecPassword.txt

The vulnerability has been identified and confirmed in versions 9.0.1.x and 9.0.4.x. I am fairly certain that it exists in all releases of version 9 and possibly other versions as well. Essentially, the program can be configured to receive updates via Symantec's or an Internal Live update server...

Symantec Antivirus / Symantec Client Security privilege escalation

With help subsystem it's possible to execute code with LocalSystem privileges...

iDEFENSE Security Advisory 08.29.05: Symantec AntiVirus 9 Corporate Edition Local Privilege Escalation Vulnerability

Symantec AntiVirus 9 Corporate Edition Local Privilege Escalation Vulnerability iDEFENSE Security Advisory 08.29.05 www.idefense.com/application/poi/display?id=298&type=vulnerabilities August 29, 2005 I. BACKGROUND Symantec AntiVirus 9 Corporate Edition is an enterprise quality Anti-Virus solutio...

iDEFENSE Security Advisory 08.29.05: Symantec AntiVirus 9 Corporate Edition Local Privilege Escalation Vulnerability

Symantec AntiVirus 9 Corporate Edition Local Privilege Escalation Vulnerability iDEFENSE Security Advisory 08.29.05 www.idefense.com/application/poi/display?id=298&type=vulnerabilities August 29, 2005 I. BACKGROUND Symantec AntiVirus 9 Corporate Edition is an enterprise quality Anti-Virus solutio...

CVE-2005-2017

Symantec AntiVirus 9 Corporate Edition allows local users to gain privileges via the "Scan for viruses" option, which launches a help window with raised privileges, a re-introduction of a vulnerability that was originally identified and addressed by CVE-2002-1540...