symantec management console vulnerabilities and exploits

(subscribe to this query)

The management console in Symantec Web Gateway 5.0.x prior to 5.0.3.18 allows remote malicious users to execute arbitrary commands via crafted input to application scripts.

Symantec Web Gateway 5.0.2 Symantec Web Gateway 5.0 Symantec Web Gateway 5.0.1 Symantec Web Gateway 5.0.3

2 EDB exploits

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote malicious...

Symantec Altiris Notification Server 6.0 Sp3 Symantec Altiris Notification Server 6.0 Symantec Altiris Management Platform 7.0 Symantec Altiris Deployment Solution 6.9 Symantec Altiris Deployment Solution 6.9.164 Symantec Altiris Deployment Solution 6.9.176 Symantec Altiris Deployment Solution 6.9.355

1 EDB exploit

The management console in Symantec Web Gateway 5.0.x prior to 5.0.3.18 allows remote malicious users to execute arbitrary shell commands via crafted input to application scripts, related to an "injection" issue.

Symantec Web Gateway 5.0.2 Symantec Web Gateway 5.0 Symantec Web Gateway 5.0.1 Symantec Web Gateway 5.0.3

VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server (CPS) 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager (NOM) 6.0 GA up to and including 6.5.5; Veritas Backup Reporter (VBR) 6.0 GA up to and including 6.6; Veritas Storage Foundation (SF) 3.5; V...

Symantec Veritas Cluster Server One 2.0.1 Symantec Veritas Storage Foundation For Oracle Real Application Cluster 3.5 Symantec Veritas Storage Foundation Cluster File System 4.0 Symantec Veritas Storage Foundation Manager 1.1 Symantec Veritas Cluster Server 5.0 Symantec Veritas Storage Foundation Cluster File System 5.0 Symantec Veritas Netbackup Operations Manager 6.5.5 Symantec Veritas Storage Foundation For Windows High Availability 5.0rp1a Symantec Veritas Storage Foundation Manager 1.0 Symantec Veritas Storage Foundation For Windows High Availability 4.3mp2 Symantec Veritas Storage Foundation Cluster File System 3.5 Symantec Veritas Storage Foundation For Oracle Real Application Cluster 4.0 Symantec Veritas Storage Foundation 3.5 Symantec Veritas Micromeasure 5.0 Symantec Veritas Storage Foundation For Windows High Availability 5.1 Symantec Backup Exec Continuous Protection Server 12.5 Symantec Veritas Storage Foundation For High Availability 3.5 Symantec Veritas Cluster Server One 2.0 Symantec Veritas Storage Foundation For Windows High Availability 5.1ap1 Symantec Veritas Netbackup Operations Manager 6.0 Ga Symantec Veritas Storage Foundation For Oracle Real Application Cluster 5.0 Symantec Veritas Storage Foundation For Sybase 5.0

The management console in the Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation for Windows (SFW) 5.0, 5.0 RP1a, and 5.1 accepts NULL NTLMSSP authentication, which allows remote malicious users to execute arbitrary code via requests ...

Symantec Veritas Storage Foundation 5.1 Symantec Veritas Storage Foundation 5.0

Symantec Ghost Solution Suite 1.1 prior to 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote malicious users to execute arbitrary commands via unspecified RPC requests in conjunction with ARP sp...

Symantec Ghost Solutions Suite 2.0.1 Symantec Ghost Solutions Suite 2.0.0 Symantec Ghost Solutions Suite 1.1

The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 prior to 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors.

Symantec Endpoint Protection Manager 12.1.0

1 EDB exploit

The management console on the Symantec Web Gateway (SWG) appliance prior to 5.1.1 allows remote malicious users to execute arbitrary commands by injecting a command into an application script.

Symantec Web Gateway Symantec Web Gateway 5.0 Symantec Web Gateway 5.0.1 Symantec Web Gateway 5.0.2 Symantec Web Gateway 5.0.3 Symantec Web Gateway 5.0.3.18 Symantec Web Gateway Appliance 8450 -Symantec Web Gateway Appliance 8490 -

1 EDB exploit

The Manager service in the management console in Symantec Endpoint Protection (SEP) 12.1 prior to 12.1 RU1-MP1 allows remote malicious users to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294.

Symantec Endpoint Protection 12.1.671 Symantec Endpoint Protection 12.1 Symantec Endpoint Protection 12.1.1000

XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 prior to 9.0 MR7,...

Symantec Client Security Symantec Antivirus -Symantec Antivirus Symantec Antivirus Central Quarantine Server Symantec Endpoint Protection Symantec System Center

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook