CVE-2006-2630

Description

Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.

Affected products

• Symantec / client_security3.0 – 3.0
• Symantec / client_security3.0.2.2010 – 3.0.2.2010
• Symantec / client_security3.0.2.2020 – 3.0.2.2020
• Symantec / client_security3.1 – 3.1
• Symantec / client_security3.1.394 – 3.1.394
• Symantec / client_security3.1.400 – 3.1.400
• Symantec / norton_antivirus10.0 – 10.0
• Symantec / norton_antivirus10.0.2.2010 – 10.0.2.2010
• Symantec / norton_antivirus10.0.2.2020 – 10.0.2.2020
• Symantec / norton_antivirus10.0.2.2021 – 10.0.2.2021
• Symantec / norton_antivirus10.1 – 10.1
• Symantec / norton_antivirus10.1.400 – 10.1.400

Exploits & proofs of concept

• exploit-dbSymantec Remote Management - Remote Buffer Overflow (Metasploit)by Metasploit

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2006/2005
• MISChttp://www.eeye.com/html/research/upcoming/20060524.html
• MISChttp://securitytracker.com/id?1016161
• MISChttp://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html
• MISChttp://securitytracker.com/id?1016162
• MISChttp://www.securityfocus.com/archive/1/435200/100/0/threaded
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/26706
• MISChttp://www.kb.cert.org/vuls/id/404910
• VENDOR_ADVISORYhttp://secunia.com/advisories/20318
• MISChttp://www.securityfocus.com/bid/18107
• MAILING_LISThttp://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046355.html