CVE-2015-6555: Improper Control of Generation of Code

Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the console Java port...

CVE-2015-8113: Undefined Security Weakness

Untrusted search path vulnerability in the client in Symantec Endpoint Protection SEP 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492...

CVE-2015-6554: Improper Neutralization of Special Elements used in an OS Command

Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data...

PT-2015-7300

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1-RU6-MP2 Description The issue allows remote attackers to execute arbitrary Java code by connecting to the console Java port. Recommendations For Symantec Endpoint Protection...

PT-2015-7299

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1-RU6-MP2 Description The issue allows remote attackers to execute arbitrary OS commands via crafted data. Recommendations For Symantec Endpoint Protection Manager SEPM version...

PT-2015-7731

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 12.1-RU6-MP3 Description The issue is related to an untrusted search path vulnerability in the client, allowing local users to gain privileges via a Trojan horse DLL in a client install package...

Symantec Releases Security Update

Symantec has released an update to address vulnerabilities in Symantec Endpoint Protection version 12.1. Exploitation of one of these vulnerabilities may allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review the Security Advisory from...

Windows Antivirus Exclusions Enumeration

This module will enumerate the file, directory, process and extension-based exclusions from supported AV products, which currently includes Microsoft Defender, Microsoft Security Essentials/Antimalware, and Symantec Endpoint Protection. This module requires Metasploit:...

Symantec Endpoint Protection Multiple Vulnerabilities (Oct 2015)

Symantec Endpoint Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Endpoint Protection ConsoleServlet ResetPassword Policy Bypass (CVE-2015-1486)

An authentication bypass vulnerability exists in Symantec Endpoint Protection. This vulnerability is due to a design flaw that lets unauthenticated users to retrieve a valid session token. A remote, unauthenticated attacker may exploit this vulnerability to create an admin account and access the...

[SYSS-2015-005] Kaspersky Total Security - Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-005 Product: Kaspersky Total Security KTS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.1.415 Tested Versions: 15.0.1.415 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level:...

[SYSS-2015-007] Kaspersky Internet Security - Authentication Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2015-007 Product: Kaspersky Internet Security KIS Vendor: Kaspersky Lab ZAO Affected Versions: 15.0.2.361 Tested Versions: 15.0.2.361 Vulnerability Type: Authentication Bypass Using an Alternate Path or Channel CWE-288 Risk Level:...

Kaspersky Total Security 15.0.1.415 Unsalted Hash Vulnerability

The SySS GmbH found out that the administrator password for protecting different functions of the Kaspersky Total Security software, like managing backups or stopping protection services, is stored as raw, unsalted MD5 hash value in the Windows registry. Product: Kaspersky Total Security KTS...

CVE-2014-9229

Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allow remote authenticated users to execute arbitrary SQL commands by leveraging the Limited Administrator role...

CVE-2014-9228

sysplant.sys in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allows local users to cause a denial of service blocked system shutdown by triggering an unspecified deadlock condition...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory...

Design/Logic Flaw

sysplant.sys in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allows local users to cause a denial of service blocked system shutdown by triggering an unspecified deadlock condition...

Sql injection

Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allow remote authenticated users to execute arbitrary SQL commands by leveraging the Limited Administrator role...

CVE-2014-9227

Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allow local users to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2014-9228

sysplant.sys in the Manager component in Symantec Endpoint Protection SEP before 12.1.6 allows local users to cause a denial of service blocked system shutdown by triggering an unspecified deadlock condition...