Lucene search
K

6 matches found

OSV
OSV
added 2024/01/26 12:15 a.m.0 views

CVE-2024-23613

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

9.8CVSS6.6AI score0.07652EPSS
Exploits0References1
NVD
NVD
added 2024/01/26 12:15 a.m.6 views

CVE-2024-23613

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

10CVSS10AI score0.07652EPSS
Exploits0References1
Prion
Prion
added 2024/01/26 12:15 a.m.12 views

Buffer overflow

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

9.3CVSS8.5AI score0.07652EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/01/25 11:32 p.m.9 views

CVE-2024-23613 Symantec Deployment Solution Remote Code Execution

A buffer overflow vulnerability exists in Symantec Deployment Solution version 7.9 when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this vulnerability to achieve remote code execution as SYSTEM...

10CVSS10AI score0.07652EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/01/25 12:0 a.m.3 views

PT-2024-19968 · Symantec · Symantec Deployment Solution

Name of the Vulnerable Software and Affected Versions: Symantec Deployment Solution version 7.9 Description: A buffer overflow vulnerability exists when parsing UpdateComputer tokens. A remote, anonymous attacker can exploit this issue to achieve remote code execution as SYSTEM. Recommendations:...

10CVSS10AI score0.07652EPSS
Exploits0References6
0day.today
0day.today
added 2013/11/09 12:0 a.m.46 views

Symantec Altiris DS SQL Injection Vulnerability

Usage Info This module exploits a SQL injection flaw in Symantec Altiris Deployment Solution 6.8 to 6.9.164. The vulnerability exists on axengine.exe which fails to adequately sanitize numeric input fields in "UpdateComputer" notification Requests. In order to spawn a shell, several SQL injection...

7.9AI score0.39749EPSS
Exploits9
Rows per page
Query Builder