cvelistv5 - cve-2006-2630

CVE-2006-2630 (GCVE-0-2006-2630)

Vulnerability from cvelistv5

Published

2006-05-27 21:00

Modified

2024-08-07 17:58

Severity ?

CWE

Summary

Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.

References

URL

Tags

	http://www.vupen.com/english/advisories/2006/2005	vdb-entry, x_refsource_VUPEN
	http://www.eeye.com/html/research/upcoming/20060524.html	third-party-advisory, x_refsource_EEYE
	http://securitytracker.com/id?1016161	vdb-entry, x_refsource_SECTRACK
	http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html	x_refsource_CONFIRM
	http://securitytracker.com/id?1016162	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/archive/1/435200/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://exchange.xforce.ibmcloud.com/vulnerabilities/26706	vdb-entry, x_refsource_XF
	http://www.kb.cert.org/vuls/id/404910	third-party-advisory, x_refsource_CERT-VN
	http://secunia.com/advisories/20318	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/bid/18107	vdb-entry, x_refsource_BID
	http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html	mailing-list, x_refsource_FULLDISC

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T17:58:51.885Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "ADV-2006-2005",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2005"
          },
          {
            "name": "EEYEB-20060524",
            "tags": [
              "third-party-advisory",
              "x_refsource_EEYE",
              "x_transferred"
            ],
            "url": "http://www.eeye.com/html/research/upcoming/20060524.html"
          },
          {
            "name": "1016161",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016161"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html"
          },
          {
            "name": "1016162",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016162"
          },
          {
            "name": "20060527 Symantec antivirus software exposes computers",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/435200/100/0/threaded"
          },
          {
            "name": "symantec-antivirus-client-bo(26706)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26706"
          },
          {
            "name": "VU#404910",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/404910"
          },
          {
            "name": "20318",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20318"
          },
          {
            "name": "18107",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/18107"
          },
          {
            "name": "20060526 new symantec vuln",
            "tags": [
              "mailing-list",
              "x_refsource_FULLDISC",
              "x_transferred"
            ],
            "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-05-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-18T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "ADV-2006-2005",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2005"
        },
        {
          "name": "EEYEB-20060524",
          "tags": [
            "third-party-advisory",
            "x_refsource_EEYE"
          ],
          "url": "http://www.eeye.com/html/research/upcoming/20060524.html"
        },
        {
          "name": "1016161",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016161"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html"
        },
        {
          "name": "1016162",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016162"
        },
        {
          "name": "20060527 Symantec antivirus software exposes computers",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/435200/100/0/threaded"
        },
        {
          "name": "symantec-antivirus-client-bo(26706)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26706"
        },
        {
          "name": "VU#404910",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/404910"
        },
        {
          "name": "20318",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20318"
        },
        {
          "name": "18107",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/18107"
        },
        {
          "name": "20060526 new symantec vuln",
          "tags": [
            "mailing-list",
            "x_refsource_FULLDISC"
          ],
          "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-2630",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "ADV-2006-2005",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2005"
            },
            {
              "name": "EEYEB-20060524",
              "refsource": "EEYE",
              "url": "http://www.eeye.com/html/research/upcoming/20060524.html"
            },
            {
              "name": "1016161",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016161"
            },
            {
              "name": "http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html",
              "refsource": "CONFIRM",
              "url": "http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html"
            },
            {
              "name": "1016162",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016162"
            },
            {
              "name": "20060527 Symantec antivirus software exposes computers",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/435200/100/0/threaded"
            },
            {
              "name": "symantec-antivirus-client-bo(26706)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/26706"
            },
            {
              "name": "VU#404910",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/404910"
            },
            {
              "name": "20318",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20318"
            },
            {
              "name": "18107",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/18107"
            },
            {
              "name": "20060526 new symantec vuln",
              "refsource": "FULLDISC",
              "url": "http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-2630",
    "datePublished": "2006-05-27T21:00:00.000Z",
    "dateReserved": "2006-05-27T00:00:00.000Z",
    "dateUpdated": "2024-08-07T17:58:51.885Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CERTA-2006-AVI-221

Vulnerability from certfr_avis

Une vulnérabilité a été identifiée dans certaines versions des produits Symantec AntiVirus Corporate Edition et Symantec Client Security. Un utilisateur malveillant distant peut profiter de celle-ci pour perturber le système hébergeant le service Symantec ou y exécuter des commandes arbitraires.

Description

Une vulnérabilité de type débordement de pile (ou stack overflow) a été identifiée dans certaines versions des produits Symantec AntiVirus Corporate Edition et Symantec Client Security. Une pile est une structure logique destinée à contenir des données. Cette vulnérabilité se situe au niveau de la console de gestion distante, qui est généralement activée en écoute par défaut sur le port TCP 2967. Elle ne vérifie pas correctement les données de certaines requêtes envoyées à Rtvscan.exe. Un utilisateur malveillant distant peut profiter de cette vulnérabilité pour perturber le système hébergeant le service Symantec ou y exécuter des commandes arbitraires.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

None

Impacted products

Vendor	Product	Description
Symantec	N/A	la version 10.1 de Symantec AntiVirus Corporate Edition pour Microsoft Windows ;
Symantec	N/A	la version 3.1 de Symantec Security Client pour Microsoft Windows.
Symantec	N/A	La version 10.0 de Symantec AntiVirus Corporate Edition pour Microsoft Windows ;
Symantec	N/A	la version 3.0 de Symantec Security Client pour Microsoft Windows ;

References

Title

Publication Time

Tags

Bulletin de sécurité Symantec du 27 mai 2006	None	vendor-advisory
Bulletin de sécurité eEye AD20060612 du 12 juin 2006 :	-	other
Correctifs Symantec disponibles à l'adresse suivante :	-	other
Bulletin de sécurité Symantec SYM06-010, mis à jour le 27 mai 2006 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "la version 10.1 de Symantec AntiVirus Corporate Edition pour Microsoft Windows ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "la version 3.1 de Symantec Security Client pour Microsoft Windows.",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "La version 10.0 de Symantec AntiVirus Corporate Edition pour Microsoft Windows ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    },
    {
      "description": "la version 3.0 de Symantec Security Client pour Microsoft Windows ;",
      "product": {
        "name": "N/A",
        "vendor": {
          "name": "Symantec",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": null,
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 de type d\u00e9bordement de pile (ou stack overflow) a \u00e9t\u00e9\nidentifi\u00e9e dans certaines versions des produits Symantec AntiVirus\nCorporate Edition et Symantec Client Security. Une pile est une\nstructure logique destin\u00e9e \u00e0 contenir des donn\u00e9es. Cette vuln\u00e9rabilit\u00e9\nse situe au niveau de la console de gestion distante, qui est\ng\u00e9n\u00e9ralement activ\u00e9e en \u00e9coute par d\u00e9faut sur le port TCP 2967. Elle ne\nv\u00e9rifie pas correctement les donn\u00e9es de certaines requ\u00eates envoy\u00e9es \u00e0\nRtvscan.exe. Un utilisateur malveillant distant peut profiter de cette\nvuln\u00e9rabilit\u00e9 pour perturber le syst\u00e8me h\u00e9bergeant le service Symantec\nou y ex\u00e9cuter des commandes arbitraires.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2006-2630",
      "url": "https://www.cve.org/CVERecord?id=CVE-2006-2630"
    }
  ],
  "initial_release_date": "2006-05-28T00:00:00",
  "last_revision_date": "2006-06-12T00:00:00",
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 eEye AD20060612 du 12 juin 2006 :",
      "url": "http://www.eeye.com/html/research/advisories/AD20060612.html"
    },
    {
      "title": "Correctifs Symantec disponibles \u00e0 l\u0027adresse suivante :",
      "url": "http://www.symantec.com/techsupp/enterprise/"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Symantec SYM06-010, mis \u00e0 jour le 27    mai 2006 :",
      "url": "http://www.symantec.com/avcenter/security/Content/2006.05.25.html"
    }
  ],
  "reference": "CERTA-2006-AVI-221",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2006-05-28T00:00:00.000000"
    },
    {
      "description": "ajout r\u00e9f\u00e9rence CVE et bulletin eEye.",
      "revision_date": "2006-06-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "D\u00e9ni de service \u00e0 distance"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e dans certaines versions des produits\nSymantec AntiVirus Corporate Edition et Symantec Client Security. Un\nutilisateur malveillant distant peut profiter de celle-ci pour perturber\nle syst\u00e8me h\u00e9bergeant le service Symantec ou y ex\u00e9cuter des commandes\narbitraires.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans Symantec AntiVirus et Client Security",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Symantec du 27 mai 2006",
      "url": null
    }
  ]
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CVE-2006-2630 (GCVE-0-2006-2630)

Vulnerability from cvelistv5

CERTA-2006-AVI-221

Vulnerability from certfr_avis

Description

Solution

Tags

Sightings

Nomenclature