CVE-2012-4348

The management console in Symantec Endpoint Protection SEP 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via...

Symantec Endpoint Protection Management Consoles Multiple Issues

SUMMARY The management console in Symantec Endpoint Protection Manager SEPM and Symantec Protection Center SPC for SEP 12.0 Small Business Edition, contains PHP scripts that do not properly validate external input. This could potentially result in remote code execution. Symantec Network Access...

Symantec Products CAB Files Memory Corruption Vulnerability

This host is installed with Symantec Product and is prone to memory corruption vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecprdtscabfilesmemcorrvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ Symantec Products CAB Files Memory Corruption Vulnerability Authors: Rachana Shetty Copyright:...

Symantec Products CAB Files Memory Corruption Vulnerability

Symantec Product is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Symantec Legacy Decomposer Code Execution (SYM12-017)

The version of Symantec Endpoint Protection or Symantec Scan Engine installed on the remote Windows host is potentially affected by a code execution vulnerability. The legacy decomposer engine fails to properly handle bounds-checking when parsing files from some versions of CAB archives. C Tenabl...

CVE-2012-4953

The decomposer engine in Symantec Endpoint Protection SEP 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition SAVCE 10.x, and Symantec Scan Engine SSE before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allow...

Out-of-bounds

The decomposer engine in Symantec Endpoint Protection SEP 11.0, Symantec Endpoint Protection Small Business Edition 12.0, Symantec AntiVirus Corporate Edition SAVCE 10.x, and Symantec Scan Engine SSE before 5.2.8 does not properly perform bounds checks of the contents of CAB archives, which allow...

CVE-2012-4953

CVE-2012-4953 affects the legacy Symantec decomposer engine used by multiple products and versions: SEP 11.0, SEP SBE 12.0, SAVCE 10.x, and SSE before 5.2.8. The issue is improper bounds checking when parsing CAB archive contents, potentially allowing a remote attacker to crash the application or...

ZDI-12-145 : Symantec Endpoint Protection SemSvc.exe AgentServlet Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-145 : Symantec Endpoint Protection SemSvc.exe AgentServlet Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-145 August 22, 2012 - -- CVE ID: CVE-2012-0289 - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - --...

Symantec Endpoint Protection code execution

Multiple security vulnerabilities on TCP/8433 https request parsing...

CVE-2011-5101

The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...

Design/Logic Flaw

The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...

CVE-2011-5101

The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...

CVE-2011-5101

The CVE-2011-5101 entry concerns the Rumor technology in McAfee SaaS Endpoint Protection (pre-5.2.4). The available documents specify that this component allows remote attackers to relay email messages via unspecified vectors, demonstrated by relaying spam. The exact affected versions are McAfee ...

CVE-2011-5101

The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...

Symantec Endpoint Protection SemSvc.exe AgentServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Endpoint Protection. Authentication is not required to exploit this vulnerability. The specific flaw exists within SemSvc.exe which listens by default on TCP port 8443 https. The SemSvc...

Symantec Endpoint Protection Manager Installed (credentialed check)

Symantec Endpoint Protection Manager, an endpoint security solution, is installed on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59365; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/10";...

Symantec Endpoint Protection Manager < 11 RU7 MP2 (SYM12-007 / SYM12-008) (credentialed check)

The version of Symantec Endpoint Protection Manager installed on the remote host is less than 11 RU7 MP2 11.7.7200 and has the following vulnerabilities : - A denial of service vulnerability exists that could cause the web server to stop serving pages and, in some cases, crash the server. This...

Symantec Endpoint Protection Manager < 12.1 RU1 MP1 (SYM12-008) (credentialed check)

The version of Symantec Endpoint Protection Manager installed on the remote host is less than 12.1 RU1 MP1 12.1.1101 and has the following vulnerabilities : - An arbitrary file deletion issue exists via directory traversal attacks. CVE-2012-0294 - A file inclusion vulnerability exists that could...

Symantec Endpoint Protection network threat protection module Microsoft IIS denial of service vulnerability

Overview Symantec Endpoint Protection SEP Network Threat Protection module running on a Microsoft Internet Information Services IIS webserver contains a denial of service vulnerability when probed by an audit tool. Description Symantec Security Advisory SYM12-007 states:Overview Versions of...