CVE-2015-5689

CVE-2015-5689 affects Symantec Ghost Solutions Suite and related components (Ghost Explorer Utility; DS) prior to specific HF builds. The issue is improper sign-extension before array-element accesses, enabling remote code execution, application DoS, or potential information disclosure via a craf...

CVE-2008-0640

The CVE-2008-0640 issue concerns Symantec Ghost Solution Suite versions 1.1 (before patch 2), 2.0.0, and 2.0.1, where the console and Ghost Management Agent do not authenticate the connection. This lack of authentication allows remote attackers to execute arbitrary commands via unspecified RPC re...

CVE-2006-1284

The CVE-2006-1284 entry concerns a default administrator login/password left during installation of SQLAnywhere in Symantec Ghost 8.0/8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0. This local-privilege issue could let a local user gain privileges or modify tasks. Technical context fro...

CVE-2006-1286

The CVE covers a local buffer overflow in the login dialog (dbisqlc.exe) of SQL Anywhere used with Symantec Ghost 8.0/8.2 (SGSS 1.0). Root cause: improper handling in the login dialog could allow a local user to read sensitive data from the database. Impact per sources: potential unauthorized inf...

CVE-2006-1285

The CVE-2006-1285 issue affects Symantec Ghost 8.0/8.2 (as used in Symantec Ghost Solutions Suite 1.0). The root cause is a memory-mapping permission problem in the database shared memory, causing read/write access for all users and enabling potential local access to data. Affected component: SQL...

CVE-2007-3132

CVE-2007-3132 describes multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier (including Ghost 8.0.992 and possibly other versions) that can cause a denial of service. The DoS is triggered by malformed requests sent to the daemon port over UDP: 1346/UDP or 1347/UDP. The prov...

CVE-2012-0306

CVE-2012-0306 affects Symantec Ghost Solution Suite (SGSS) 2.x through 2.5.1. The issue is a memory corruption vulnerability in how Ghost Explorer parses specially crafted GHO/backup files. Successful exploitation could allow arbitrary code execution with the current user’s privileges (potentiall...