Symantec Endpoint Protection Manager /servlet/ConsoleServlet Remote Command Execution

This module exploits XXE and SQL injection flaws in Symantec Endpoint Protection Manager versions 11.0, 12.0 and 12.1. When supplying a specially crafted XML external entity XXE request an attacker can reach SQL injection affected components. As xpcmdshell is enabled in the included database...

Symantec Endpoint Protection Manager 11.0/12.0/12.1 - Remote Command Execution

import argparse import httplib """ Exploit Title: Symantec Endpoint Protection Manager Remote Command Execution Exploit Author: Chris Graham @cgrahamseven CVE: CVE-2013-5014, CVE-2013-5015 Date: February 22, 2014 Vendor Homepage: http://www.symantec.com/endpoint-protection Version: 11.0, 12.0, 12...

Symantec Endpoint Protection Manager本地SQL注入漏洞(CVE-2013-5015)

BUGTRAQ ID: 65467 CVECAN ID: CVE-2013-5015 Symantec Endpoint Protection SEP是反病毒和防火墙产品。 Symantec Endpoint Protection Manager 11.0、Symantec Endpoint Protection Center Small Business Edition 12.0、Symantec Endpoint Protection Manager 12.1版本没有有效过滤数据库的本地请求，恶意本地用户可利用此漏洞注入任意SQL数据库查询。 0 Symantec Web Gatew...

Symantec Endpoint Protection Manager < 11.0 RU7-MP4a / 12.1 RU4a Multiple Vulnerabilities (SYM14-004)

The version of Symantec Endpoint Protection Manager SEPM running on the remote host is either 11.x prior to 11.0 RU7-MP4a or 12.x prior to 12.1 RU4a. It is, therefore, affected by multiple vulnerabilities: - SEPM is affected by an XML external entity injection vulnerability due to a failure to...

CVE-2013-5015

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQ...

Sql injection

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQ...

CVE-2013-5015

CVE-2013-5015 affects Symantec Endpoint Protection Manager (SEPM) and related components. The vulnerability is a SQL injection in the management console that, when exploited by remote authenticated users, can cause arbitrary SQL commands to be executed. Affected versions in the initial data inclu...

CVE-2013-5015

SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager SEPM 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQ...

Symantec Endpoint Protection Manager < 11.0.7.4 / 12.1.2 RU2 (SYM14-001)

The version of Symantec Endpoint Protection Manager running on the remote host is either 11.x prior to 11.0.7.4 or 12.x prior to 12.1.2 RU2. It is, therefore, affected by a remote privilege escalation vulnerability that could allow an authenticated, remote attacker to gain administrator access. C...

Symantec Endpoint Protection Manager (SEPM) Buffer Overflow Vulnerability

The host is installed with Symantec Endpoint Protection Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecepmbofvuln.nasl 6074 2017-05-05 09:03:14Z teissa $ Symantec Endpoint Protection Manager SEPM Buffer Overflow Vulnerability Authors: Thanga Praka...

CVE-2013-1612

Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager SEPM 12.1.x before 12.1.3, and Symantec Endpoint Protection Center SPC Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-1612

CVE-2013-1612 affects Symantec Endpoint Protection Manager (SEPM) 12.1.x (prior to 12.1.3) and SPC Small Business Edition 12.0.x . The underlying issue is a buffer overflow in the secars.dll component of the SEPM management console, caused by insufficient boundary checks when processing external ...

Symantec Endpoint Protection Manager < 12.1 RU3 (SYM13-005) (credentialed check)

The version of Symantec Endpoint Protection Manager installed on the remote host is a version prior to 12.1 RU3. It is, therefore, potentially affected by a buffer overflow vulnerability in the 'secars.dll' component. By exploiting this flaw, a remote, unauthenticated attacker could execute...

Symantec Endpoint Protection Management Consoles Multiple Issues

SUMMARY The management console in Symantec Endpoint Protection Manager SEPM and Symantec Protection Center SPC for SEP 12.0 Small Business Edition, contains PHP scripts that do not properly validate external input. This could potentially result in remote code execution. Symantec Network Access...

Symantec Endpoint Protection Manager Installed (credentialed check)

Symantec Endpoint Protection Manager, an endpoint security solution, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59365; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Symantec Endpoint Protection Manager < 12.1 RU1 MP1 (SYM12-008) (credentialed check)

The version of Symantec Endpoint Protection Manager installed on the remote host is less than 12.1 RU1 MP1 12.1.1101 and has the following vulnerabilities : - An arbitrary file deletion issue exists via directory traversal attacks. CVE-2012-0294 - A file inclusion vulnerability exists that could...

Symantec Endpoint Protection Manager TestConnection.jsp 'Msg' Parameter XSS (SYM11-009 & SYM12-001)

The version of Symantec Endpoint Protection Manager running on the remote web server is affected by a cross-site scripting XSS vulnerability due to improper sanitization of input to the 'Msg' parameter in the TestConnection.jsp file. An unauthenticated, remote attacker can exploit this...

Symantec Endpoint Protection Manager XSS and CSRF Vulnerabilities

Symantec Endpoint Protection Manager is prone to cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2011-0550

Multiple cross-site scripting XSS vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via 1 the token parameter to portal/Help.jsp or 2 the URI in a...

CVE-2011-0551

Cross-site request forgery CSRF vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...