CVE-2007-4347

Multiple integer overflows in the Job Engine bengine.exe service in Symantec Backup Exec for Windows Servers BEWS 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to cause a denial of service CPU and memory consumption via a crafted packet to port 5633/tcp, which triggers an infinite lo...

CVE-2007-4346

The Job Engine bengine.exe service in Symantec Backup Exec for Windows Servers BEWS 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service NULL dereference and service crash via a crafted packet to port 5633/tcp...

Secunia Research: Symantec Backup Exec Job Engine Denial of Service

====================================================================== Secunia Research 28/11/2007 - Symantec Backup Exec Job Engine Denial of Service - ====================================================================== Table of Contents Affected...

Symantec Backup Exec for Windows Servers Denial of Service Vulnerabilities

Backup Exec for Windows Servers, a commercial backup product from Symantec, is installed on the remote host. The version of the Backup Exec Job Engine, bengine.exe, installed as part of Backup Exec for Windows Server on the remote host contains a NULL pointer dereference error when handling...

PHP 5.x COM functions safe_mode and disable_function bypass

No description provided by source. ?php //PHP 5.x COM functions safemode and disablefunction bypass //author: shinnai //mail: shinnaiatautisticidotorg //site: http://shinnai.altervista.org //dork: intitle:phpinfo intext:"php version" +windows thanks to rgod...

PHP 5.x COM - Safe Mode disable_functions Bypass

PHP 5.x COM - Safe Mode disablefunctions Bypass sounds good //The windows version of PHP has built in support for this extension. You do not need to //load any additional extension in order to use these functions. //You are responsible for installing support for the various COM objects that you...

kwsphpnews-sql.txt

Script....................................: KwsPHP ver 1.0 Newsletter Module Script Site...........................: http://www.kwsphp.org Vulnerability........................: Remote SQL injection Exploit Access..................................: Remote...

CVE-2007-5143

F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted 1 archive or 2 packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to...

Cross site scripting

F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to store a crafted 1 archive or 2 packed executable. NOTE: in many environments, this does not cross privilege boundaries because any process able to write to...

CVE-2007-5143

F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition is affected by CVE-2007-5143. Local users can bypass virus scanning by placing a crafted (archive or packed executable) into the system32 directory. In many environments this does not cross privilege boundaries since a process that can wr...

F-Secure Anti-Virus for Windows system32 Directory Crafted File Detection Bypass

The remote host is running F-Secure Anti-Virus for Windows Servers. According to its version, the installation of this software on the remote host may allow an attacker by bypass antivirus scanning by placing a specially crafted archive or packed executable into the 'system32' folder. Note that...

CVE-2007-5126

Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...

Information disclosure

Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...

CVE-2007-5126

Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d has unknown impact and remote attack vectors. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release...

CVE-2007-5126

Technical details about CVE-2007-5126 are not publicly available in the provided connected documents; no specific affected products, versions, impact, or remediation are disclosed. Monitor for updates.

webbatch-xss.txt

HSC WebBatch Applications Cross Site Scripting Vulrnability This issue is due to a failure in the application to properly sanitize user-supplied input. Attackers may exploit this issue via a web client. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

CVE-2007-3509

Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service process exit and possibly execute arbitrary code via crafted ncacniptcp requests...

Heap overflow

Heap-based buffer overflow in the RPC subsystem in Symantec Backup Exec for Windows Servers 10.0, 10d, and 11d allows remote attackers to cause a denial of service process exit and possibly execute arbitrary code via crafted ncacniptcp requests...

Microsoft Win32 API Parameter Validation Remote Code Execution Vulnerability

Description The Microsoft Win32 API is prone to remote code execution. An attacker could exploit this issue to execute code in the context of the user visiting a malicious webpage. Technologies Affected Avaya CIE 1.0 Avaya Messaging Application Server Avaya Messaging Application Server MM 1.1 Ava...

Symantec Security Advisory, SYM06-005

Symantec Security Advisory SYM06-005 17 March 2006 Veritas Backup Exec for Windows Servers: Media Server BENGINE Service Job log Format String Overflow Revision History None Severity Low network/system authorization and specific configuration required Remote Access Yes Local Access No...