Details of VAR-200609-0473

ID

VAR-200609-0473

CVE

CVE-2006-4855

TITLE

Symantec Norton Personal Firewall Such as \Device\SymEvent Service disruption in drivers (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2006-003187

DESCRIPTION

The \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.0.33, and other versions of Norton Personal Firewall, Internet Security, AntiVirus, SystemWorks, Symantec Client Security SCS 1.x, 2.x, 3.0, and 3.1, Symantec AntiVirus Corporate Edition SAVCE 8.x, 9.x, 10.0, and 10.1, Symantec pcAnywhere 11.5 only, and Symantec Host, allows local users to cause a denial of service (system crash) via invalid data, as demonstrated by calling DeviceIoControl to send the data. Multiple Symantec products are prone to a local denial-of-service vulnerability. This issue occurs when attackers send malformed data to the 'SymEvent' driver. A local authenticated attacker may exploit this issue to crash affected computers, denying service to legitimate users. Please see the vulnerable systems section for details regarding affected Symantec products. Norton does not adequately protect the \Device\SymEvent driver, nor does it validate its input buffer, allowing Everyone to write data to this driver, which may cause the driver to perform invalid memory operations and crash the entire operating system. ---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. The vulnerability is caused due to an error in the handling of data sent to the "\Device\SymEvent" device which is writable by "Everyone". Other versions may also be affected. SOLUTION: Grant only trusted users access to affected systems. PROVIDED AND/OR DISCOVERED BY: David Matousek ORIGINAL ADVISORY: http://www.matousec.com/info/advisories/Norton-Insufficient-validation-of-SymEvent-driver-input-buffer.php ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2006-4855 // JVNDB: JVNDB-2006-003187 // BID: 20051 // VULHUB: VHN-20963 // PACKETSTORM: 50081

AFFECTED PRODUCTS

vendor:	symantec	model:	pcanywhere	scope:	eq	version:	11.5	Trust: 2.7
vendor:	symantec	model:	norton personal firewall	scope:	eq	version:	2006	Trust: 1.9
vendor:	symantec	model:	norton personal firewall	scope:	eq	version:	2005	Trust: 1.9
vendor:	symantec	model:	norton internet security	scope:	eq	version:	2004	Trust: 1.9
vendor:	symantec	model:	norton system works	scope:	eq	version:	2004	Trust: 1.6
vendor:	symantec	model:	norton system works	scope:	eq	version:	2005_premier	Trust: 1.6
vendor:	symantec	model:	norton system works	scope:	eq	version:	2004_professional_edition	Trust: 1.6
vendor:	symantec	model:	norton system works	scope:	eq	version:	2005	Trust: 1.6
vendor:	symantec	model:	norton system works	scope:	eq	version:	2006	Trust: 1.6
vendor:	symantec	model:	norton system works	scope:	eq	version:	2003_professional_edition	Trust: 1.6
vendor:	symantec	model:	norton personal firewall	scope:	eq	version:	2004	Trust: 1.3
vendor:	symantec	model:	norton personal firewall	scope:	eq	version:	2003	Trust: 1.3
vendor:	symantec	model:	norton internet security	scope:	eq	version:	2005	Trust: 1.3
vendor:	symantec	model:	norton internet security	scope:	eq	version:	2003	Trust: 1.3
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	2006	Trust: 1.3
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	2005	Trust: 1.3
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	2004	Trust: 1.3
vendor:	symantec	model:	client security	scope:	eq	version:	3.0	Trust: 1.3
vendor:	symantec	model:	client security	scope:	eq	version:	2.0	Trust: 1.3
vendor:	symantec	model:	client security	scope:	eq	version:	1.1.1	Trust: 1.3
vendor:	symantec	model:	client security	scope:	eq	version:	1.1	Trust: 1.3
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1	Trust: 1.3
vendor:	symantec	model:	client security	scope:	eq	version:	1.0	Trust: 1.3
vendor:	symantec	model:	client security	scope:	eq	version:	3.1	Trust: 1.3
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.0.825a	Trust: 1.0
vendor:	symantec	model:	norton internet security	scope:	eq	version:	2006	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.0.3.1000	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	2.0_scf_7.1	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	2.0.5_build_1100	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0.2.2021	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.01.464	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.1	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.425a	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0_build_8.01.9374	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	2007	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.01.471	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.0	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.0.1.9374	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.501	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.0	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.01.437	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.0.2.1000	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	2003	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.1.1_mr2_build_8.1.1.319	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0.2.2011	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.1.1_mr3_build_8.1.1.323	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.0.5	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.0.5.1100	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0.2.2001	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	2.0.1_build_9.0.1.1000	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.1	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.1.1_mr1_build_8.1.1.314a	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.460	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.0.1	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0.2.2000	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.0_b8.01.9378	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.0.0.338	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.1.377	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.1.1_mr4_build_8.1.1.329	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.0.1.9378	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.464	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.457	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.1.323	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.1.319	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0.2.2002	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0.2.2010	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	2.0.3_build_9.0.3.1000	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.1.366	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.1_stm_b8.1.0.825a	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.0.1.425a	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.1.1_mr6_b8.1.1.266	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.1_build393	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	2.0.2_build_9.0.2.1000	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.437	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.0.4	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0.2.2020	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.429c	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.1.1_build_393	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.0.1.501	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.01.434	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.434	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.1.1_mr5_build_8.1.1.336	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.01.460	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.0.1.425c	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.01.446	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.471	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.0.1.1.1000	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.1_build8.1.1.314a	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	2.1	Trust: 1.0
vendor:	symantec	model:	norton internet security	scope:	eq	version:	2007	Trust: 1.0
vendor:	symantec	model:	host ids	scope:	eq	version:	*	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.01.457	Trust: 1.0
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	8.1.1.329	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	2.0_stm_build_9.0.0.338	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.0.1_build_8.01.446	Trust: 1.0
vendor:	symantec	model:	client security	scope:	eq	version:	1.x	Trust: 0.8
vendor:	symantec	model:	client security	scope:	eq	version:	2.x	Trust: 0.8
vendor:	symantec	model:	client security	scope:	eq	version:	3.0 and 3.1	Trust: 0.8
vendor:	symantec	model:	host ids	scope:	-	version:	-	Trust: 0.8
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	corporate edition savce 8.x	Trust: 0.8
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	9.x	Trust: 0.8
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	10.0 and 10.1	Trust: 0.8
vendor:	symantec	model:	norton internet security	scope:	-	version:	-	Trust: 0.8
vendor:	symantec	model:	norton personal firewall	scope:	eq	version:	2006 9.1.0.33	Trust: 0.8
vendor:	symantec	model:	norton systemworks	scope:	-	version:	-	Trust: 0.8
vendor:	symantec	model:	norton systemworks	scope:	eq	version:	20060	Trust: 0.3
vendor:	symantec	model:	norton systemworks premier	scope:	eq	version:	20050	Trust: 0.3
vendor:	symantec	model:	norton systemworks	scope:	eq	version:	20050	Trust: 0.3
vendor:	symantec	model:	norton systemworks professional edition	scope:	eq	version:	2004	Trust: 0.3
vendor:	symantec	model:	norton systemworks	scope:	eq	version:	2004	Trust: 0.3
vendor:	symantec	model:	norton systemworks professional edition	scope:	eq	version:	2003	Trust: 0.3
vendor:	symantec	model:	norton internet security	scope:	eq	version:	20070	Trust: 0.3
vendor:	symantec	model:	norton internet security professional edition	scope:	eq	version:	2006	Trust: 0.3
vendor:	symantec	model:	norton internet security professional edition	scope:	eq	version:	2005	Trust: 0.3
vendor:	symantec	model:	norton internet security professional edition	scope:	eq	version:	2004	Trust: 0.3
vendor:	symantec	model:	norton internet security professional edition	scope:	eq	version:	2003	Trust: 0.3
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	20070	Trust: 0.3
vendor:	symantec	model:	norton antivirus professional edition	scope:	eq	version:	2004	Trust: 0.3
vendor:	symantec	model:	norton antivirus professional edition	scope:	eq	version:	2003	Trust: 0.3
vendor:	symantec	model:	norton antivirus	scope:	eq	version:	20030	Trust: 0.3
vendor:	symantec	model:	host ids	scope:	eq	version:	0	Trust: 0.3
vendor:	symantec	model:	client security build	scope:	eq	version:	2.0.51100	Trust: 0.3
vendor:	symantec	model:	client security mr3 b9.0.3.1000	scope:	eq	version:	2.0.3	Trust: 0.3
vendor:	symantec	model:	client security mr2 b9.0.2.1000	scope:	eq	version:	2.0.2	Trust: 0.3
vendor:	symantec	model:	client security mr1 b9.0.1.1000	scope:	eq	version:	2.0.1	Trust: 0.3
vendor:	symantec	model:	client security stm build	scope:	eq	version:	2.09.0.0.338	Trust: 0.3
vendor:	symantec	model:	client security (scf	scope:	eq	version:	2.07.1)	Trust: 0.3
vendor:	symantec	model:	client security mr5 build	scope:	eq	version:	1.1.18.1.1.336	Trust: 0.3
vendor:	symantec	model:	client security mr4 build	scope:	eq	version:	1.1.18.1.1.329	Trust: 0.3
vendor:	symantec	model:	client security mr3 build	scope:	eq	version:	1.1.18.1.1.323	Trust: 0.3
vendor:	symantec	model:	client security mr2 build	scope:	eq	version:	1.1.18.1.1.319	Trust: 0.3
vendor:	symantec	model:	client security mr1 build 8.1.1.314a	scope:	eq	version:	1.1.1	Trust: 0.3
vendor:	symantec	model:	client security build	scope:	eq	version:	1.1.1393	Trust: 0.3
vendor:	symantec	model:	client security mr6 b8.1.1.266	scope:	eq	version:	1.1.1	Trust: 0.3
vendor:	symantec	model:	client security stm b8.1.0.825a	scope:	eq	version:	1.1	Trust: 0.3
vendor:	symantec	model:	client security mr8 build	scope:	eq	version:	1.0.18.01.471	Trust: 0.3
vendor:	symantec	model:	client security mr7 build	scope:	eq	version:	1.0.18.01.464	Trust: 0.3
vendor:	symantec	model:	client security mr6 build	scope:	eq	version:	1.0.18.01.460	Trust: 0.3
vendor:	symantec	model:	client security mr5 build	scope:	eq	version:	1.0.18.01.457	Trust: 0.3
vendor:	symantec	model:	client security mr4 build	scope:	eq	version:	1.0.18.01.446	Trust: 0.3
vendor:	symantec	model:	client security mr3 build	scope:	eq	version:	1.0.18.01.434	Trust: 0.3
vendor:	symantec	model:	client security build	scope:	eq	version:	1.0.18.01.437	Trust: 0.3
vendor:	symantec	model:	client security mr9 b8.01.501	scope:	eq	version:	1.0.1	Trust: 0.3
vendor:	symantec	model:	client security mr2 b8.01.429c	scope:	eq	version:	1.0.1	Trust: 0.3
vendor:	symantec	model:	client security mr1 b8.01.425a/b	scope:	eq	version:	1.0.1	Trust: 0.3
vendor:	symantec	model:	client security b8.01.9378	scope:	eq	version:	1.0.0	Trust: 0.3
vendor:	symantec	model:	client security b8.01.9374	scope:	eq	version:	1.0	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.0.2.2021	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.0.2.2020	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.0.2.2011	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.0.2.2010	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.0.2.2002	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.0.2.2001	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.0.2.2000	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.0	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	9.0.5.1100	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	9.0.5	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	9.0.4	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	9.0.3.1000	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	9.0.2.1000	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	9.0.1.1.1000	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	9.0.0.338	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	9.0	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.1.18.1.1.329	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.1.18.1.1.323	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.1.18.1.1.319	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build 8.1.1.314a	scope:	eq	version:	8.1.1	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.1.1393	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.1.1.377	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.1.1.366	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.1.1	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.18.01.471	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.18.01.464	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.18.01.460	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.18.01.457	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.18.01.446	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.18.01.437	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition build	scope:	eq	version:	8.18.01.434	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition .0.825a	scope:	eq	version:	8.1	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.1	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.01.9378	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.01.9374	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.01.501	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition 1.429c	scope:	eq	version:	8.0	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition 1.425a/b	scope:	eq	version:	8.0	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.01	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	8.0	Trust: 0.3
vendor:	symantec	model:	antivirus corporate edition	scope:	eq	version:	10.1	Trust: 0.3

sources: BID: 20051 // JVNDB: JVNDB-2006-003187 // CNNVD: CNNVD-200609-347 // NVD: CVE-2006-4855

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2006-4855
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2006-4855
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-200609-347
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-20963
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2006-4855
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-20963
severity:	MEDIUM
baseScore:	4.9
vectorString:	AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-20963 // JVNDB: JVNDB-2006-003187 // CNNVD: CNNVD-200609-347 // NVD: CVE-2006-4855

PROBLEMTYPE DATA

problemtype:

CWE-399

Trust: 1.9

sources: VULHUB: VHN-20963 // JVNDB: JVNDB-2006-003187 // NVD: CVE-2006-4855

THREAT TYPE

local

Trust: 1.0

sources: BID: 20051 // PACKETSTORM: 50081 // CNNVD: CNNVD-200609-347

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-200609-347

CONFIGURATIONS

sources: JVNDB: JVNDB-2006-003187

EXPLOIT AVAILABILITY

sources: VULHUB: VHN-20963

PATCH

title:

SYM06-018

url:

http://www.symantec.com/avcenter/security/Content/2006.09.20a.html

Trust: 0.8

sources: JVNDB: JVNDB-2006-003187

EXTERNAL IDS

db:	NVD	id:	CVE-2006-4855	Trust: 2.8
db:	BID	id:	20051	Trust: 2.0
db:	SECUNIA	id:	21938	Trust: 1.8
db:	SECTRACK	id:	1016897	Trust: 1.7
db:	SECTRACK	id:	1016895	Trust: 1.7
db:	SECTRACK	id:	1016898	Trust: 1.7
db:	SECTRACK	id:	1016892	Trust: 1.7
db:	SECTRACK	id:	1016889	Trust: 1.7
db:	SECTRACK	id:	1016894	Trust: 1.7
db:	SECTRACK	id:	1016893	Trust: 1.7
db:	SECTRACK	id:	1016896	Trust: 1.7
db:	SREASON	id:	1591	Trust: 1.7
db:	VUPEN	id:	ADV-2006-3636	Trust: 1.7
db:	JVNDB	id:	JVNDB-2006-003187	Trust: 0.8
db:	CNNVD	id:	CNNVD-200609-347	Trust: 0.7
db:	XF	id:	28960	Trust: 0.6
db:	BUGTRAQ	id:	20060915 SYMANTEC NORTON INSUFFICIENT VALIDATION OF 'SYMEVENT' DRIVER INPUT BUFFER	Trust: 0.6
db:	SEEBUG	id:	SSVID-82146	Trust: 0.1
db:	EXPLOIT-DB	id:	28588	Trust: 0.1
db:	VULHUB	id:	VHN-20963	Trust: 0.1
db:	PACKETSTORM	id:	50081	Trust: 0.1

sources: VULHUB: VHN-20963 // BID: 20051 // JVNDB: JVNDB-2006-003187 // PACKETSTORM: 50081 // CNNVD: CNNVD-200609-347 // NVD: CVE-2006-4855

REFERENCES

url:	http://www.matousec.com/info/advisories/norton-insufficient-validation-of-symevent-driver-input-buffer.php	Trust: 1.8
url:	http://www.securityfocus.com/bid/20051	Trust: 1.7
url:	http://securityresponse.symantec.com/avcenter/security/content/2006.09.20a.html	Trust: 1.7
url:	http://securitytracker.com/id?1016889	Trust: 1.7
url:	http://securitytracker.com/id?1016892	Trust: 1.7
url:	http://securitytracker.com/id?1016893	Trust: 1.7
url:	http://securitytracker.com/id?1016894	Trust: 1.7
url:	http://securitytracker.com/id?1016895	Trust: 1.7
url:	http://securitytracker.com/id?1016896	Trust: 1.7
url:	http://securitytracker.com/id?1016897	Trust: 1.7
url:	http://securitytracker.com/id?1016898	Trust: 1.7
url:	http://secunia.com/advisories/21938	Trust: 1.7
url:	http://securityreason.com/securityalert/1591	Trust: 1.7
url:	http://www.securityfocus.com/archive/1/446111/100/0/threaded	Trust: 1.1
url:	http://www.vupen.com/english/advisories/2006/3636	Trust: 1.1
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/28960	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2006-4855	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2006-4855	Trust: 0.8
url:	http://xforce.iss.net/xforce/xfdb/28960	Trust: 0.6
url:	http://www.securityfocus.com/archive/1/archive/1/446111/100/0/threaded	Trust: 0.6
url:	http://www.frsirt.com/english/advisories/2006/3636	Trust: 0.6
url:	http://www.symantec.com/sabu/nis/npf/	Trust: 0.3
url:	http://www.symantec.com/avcenter/security/content/2006.09.20a.html	Trust: 0.3
url:	/archive/1/446111	Trust: 0.3
url:	http://secunia.com/product/6638/	Trust: 0.1
url:	http://secunia.com/secunia_security_advisories/	Trust: 0.1
url:	http://secunia.com/quality_assurance_analyst/	Trust: 0.1
url:	http://secunia.com/advisories/21938/	Trust: 0.1
url:	http://secunia.com/product/6637/	Trust: 0.1
url:	http://secunia.com/hardcore_disassembler_and_reverse_engineer/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://secunia.com/web_application_security_specialist/	Trust: 0.1
url:	http://secunia.com/about_secunia_advisories/	Trust: 0.1

sources: VULHUB: VHN-20963 // BID: 20051 // JVNDB: JVNDB-2006-003187 // PACKETSTORM: 50081 // CNNVD: CNNVD-200609-347 // NVD: CVE-2006-4855

CREDITS

David Matousek david@matousec.com

Trust: 0.6

sources: CNNVD: CNNVD-200609-347

SOURCES

db:	VULHUB	id:	VHN-20963
db:	BID	id:	20051
db:	JVNDB	id:	JVNDB-2006-003187
db:	PACKETSTORM	id:	50081
db:	CNNVD	id:	CNNVD-200609-347
db:	NVD	id:	CVE-2006-4855

LAST UPDATE DATE

2024-08-14T14:59:10.998000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-20963	date:	2018-10-17T00:00:00
db:	BID	id:	20051	date:	2015-05-12T19:49:00
db:	JVNDB	id:	JVNDB-2006-003187	date:	2012-12-20T00:00:00
db:	CNNVD	id:	CNNVD-200609-347	date:	2006-09-28T00:00:00
db:	NVD	id:	CVE-2006-4855	date:	2018-10-17T21:39:55.653

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-20963	date:	2006-09-19T00:00:00
db:	BID	id:	20051	date:	2006-09-15T00:00:00
db:	JVNDB	id:	JVNDB-2006-003187	date:	2012-12-20T00:00:00
db:	PACKETSTORM	id:	50081	date:	2006-09-16T01:17:17
db:	CNNVD	id:	CNNVD-200609-347	date:	2006-09-19T00:00:00
db:	NVD	id:	CVE-2006-4855	date:	2006-09-19T18:07:00