symantec Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/symantec/ Sun, 26 Feb 2023 09:11:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png symantec Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/symantec/ 32 32 CVE-2008-6828 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6828/ Sun, 26 Feb 2023 09:11:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6828/ Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

The post CVE-2008-6828 appeared first on CVE Vulnerability.

]]> Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

The post CVE-2008-6828 appeared first on CVE Vulnerability.

]]> CVE-2008-6827 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6827/ Sun, 26 Feb 2023 09:11:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6827/ The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a “Shatter” style attack on the “command prompt” hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify […]

The post CVE-2008-6827 appeared first on CVE Vulnerability.

]]> The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a “Shatter” style attack on the “command prompt” hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function.

The post CVE-2008-6827 appeared first on CVE Vulnerability.

]]> CVE-2008-4564 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4564/ Sun, 26 Feb 2023 09:10:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4564/ Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

The post CVE-2008-4564 appeared first on CVE Vulnerability.

]]> Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

The post CVE-2008-4564 appeared first on CVE Vulnerability.

]]> CVE-2008-2794 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2794/ Sun, 26 Feb 2023 09:09:42 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2794/ Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2794 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2794 appeared first on CVE Vulnerability.

]]> CVE-2008-2286 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2286/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2286/ SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

The post CVE-2008-2286 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

The post CVE-2008-2286 appeared first on CVE Vulnerability.

]]> CVE-2008-2291 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2291/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2291/ axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.

The post CVE-2008-2291 appeared first on CVE Vulnerability.

]]> axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.

The post CVE-2008-2291 appeared first on CVE Vulnerability.

]]> CVE-2008-2290 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2290/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2290/ Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2290 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2290 appeared first on CVE Vulnerability.

]]> CVE-2008-2289 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2289/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2289/ Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2289 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2289 appeared first on CVE Vulnerability.

]]> CVE-2008-2288 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2288/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2288/ Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.

The post CVE-2008-2288 appeared first on CVE Vulnerability.

]]> Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.

The post CVE-2008-2288 appeared first on CVE Vulnerability.

]]> CVE-2008-2287 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2287/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2287/ Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.

The post CVE-2008-2287 appeared first on CVE Vulnerability.

]]> Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.

The post CVE-2008-2287 appeared first on CVE Vulnerability.

]]>