CVE-2017-13675: Undefined Security Weakness

A denial of service DoS attack in Symantec Endpoint Encryption before SEE 11.1.3HF2 allows remote attackers to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a specific host within a network...

Symantec Endpoint Encryption / Symantec Encryption Desktop DoS

SUMMARY Symantec has released an update to address four issues in the Symantec Endpoint Encryption / Symantec Encryption Desktop products. AFFECTED PRODUCTS Symantec Endpoint Encryption SEE --- CVE | Affected Versions | Remediation CVE-2017-13675 CVE-2017-13683 | Prior to 11.1.3HF3 | Upgrade to...

Symantec Endpoint Encryption (SEE) Detection (Windows SMB Login)

Detects the installed version of Symantec Endpoint Encryption SEE. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Symantec Endpoint Encryption Client Memory Dump Information Disclosure Vulnerability

Symantec Endpoint Encryption SEE is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE=...

Symantec Endpoint Encryption Unquoted Windows Search Path Vulnerability

Symantec Endpoint Encryption SEE is prone to unquoted windows search path vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE=...

Design/Logic Flaw

Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption SEE 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe...

CVE-2015-8156

Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption SEE 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe...

CVE-2015-8156

Summary of CVE-2015-8156 from provided documents The issue affects Symantec Endpoint Encryption (SEE), specifically the Drive Encryption/EEDService component in SEE 11.x before 11.1.1. A local attacker could exploit an unquoted Windows search path vulnerability to escalate privileges by placing a...

CVE-2015-8156: Undefined Security Weakness

Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption SEE 11.x before 11.1.1 allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe...

PT-2016-3865

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Encryption SEE versions 11.x before 11.1.1 Description The issue allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory. This can be demonstrated by placing a malicious...

Symantec Endpoint Encryption Client Installed

Binary data symantecendpointencryptiondriveencryptioninstalled.nbin...

Symantec Endpoint Encryption < 8.x / 9.x < 11.1.1 Unquoted Search Path Local Privilege Escalation (SYM16-006)

The version of the Symantec Endpoint Encryption SEE Drive Encryption Client installed on the remote Windows host is prior to 11.1.1. It is, therefore, affected by a privilege escalation vulnerability due to an unquoted search path in EEDService. A local attacker can exploit this to escalate...

Symantec Endpoint Encryption EEDService Arbitrary Code Execution Vulnerability

Symantec Endpoint Encryption SEE is a suite of software from Symantec Corporation that provides advanced encryption and management capabilities for desktops, laptops, and removable storage devices. A security vulnerability exists in Symantec Endpoint Encryption SEE version 11.x in EEDService. A...

Symantec Endpoint Encryption Unquoted Service Path Local Elevation of Privilege

SUMMARY Symantec Endpoint Encryption SEE has an unquoted search path in EEDService. This could provide a non-privileged local user the ability to successfully insert arbitrary code in the root path. AFFECTED PRODUCTS Symantec Endpoint Encryption --- CVE | Affected Versions | Remediation...

Symantec Endpoint Encryption Information Disclosure Vulnerability

Symantec Endpoint Encryption i.e. SEE is a suite of software from Symantec that provides advanced encryption and management capabilities for desktops, laptops and removable storage devices. An information disclosure vulnerability exists in versions of Symantec Endpoint Encryption prior to 11.1.0...

CVE-2015-6556

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption SEE before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump...

Design/Logic Flaw

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption SEE before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump...

CVE-2015-6556

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption SEE before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump...

CVE-2015-6556

Symantec Endpoint Encryption (SEE) up to version 11.0 is affected by CVE-2015-6556 due to EACommunicatorSrv.exe in the Framework Service allowing an authenticated remote user to trigger a memory dump and access credentials stored on the client. The issue is documented with a low CVSS v2 base scor...

CVE-2015-6556: Exposure of Sensitive Information to an Unauthorized Actor

EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption SEE before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump...