CVE-2012-1821

The Network Threat Protection module in the Manager component in Symantec Endpoint Protection SEP 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service web-server outage, or daemon crash or hang via a flood of packets that triggers automated...

Design/Logic Flaw

The Network Threat Protection module in the Manager component in Symantec Endpoint Protection SEP 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service web-server outage, or daemon crash or hang via a flood of packets that triggers automated...

CVE-2012-1821

CVE-2012-1821 affects the Symantec Endpoint Protection Manager 11.x Network Threat Protection module on Windows Server 2003, with SEP 11.0.600x–11.0.700x. A remote attacker can trigger a denial of service by flooding the web server, causing it to become unresponsive or the daemon to crash/hang. T...

CVE-2012-1821

The Network Threat Protection module in the Manager component in Symantec Endpoint Protection SEP 11.0.600x through 11.0.700x on Windows Server 2003 allows remote attackers to cause a denial of service web-server outage, or daemon crash or hang via a flood of packets that triggers automated...

CVE-2012-0294

Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors...

CVE-2012-0295

The Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294...

CVE-2012-0289

Buffer overflow in Symantec Endpoint Protection SEP 11.0.600x through 11.0.710x and Symantec Network Access Control SNAC 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script...

Code injection

The Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294...

Buffer overflow

Buffer overflow in Symantec Endpoint Protection SEP 11.0.600x through 11.0.710x and Symantec Network Access Control SNAC 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script...

CVE-2012-0289

CVE-2012-0289 affects Symantec Endpoint Protection and Symantec Network Access Control (SEP/SNAC) on Windows. The issue is a buffer overflow in SEP/SNAC components (notably SemSvc/AgentServlet) that, via crafted input, allowed local users to gain privileges and potentially cause data modification...

CVE-2012-0294

Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors...

CVE-2012-0295

The Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294...

CVE-2012-0295

Affected product: Symantec Endpoint Protection Manager (SEP MGR)

CVE-2012-0289

Buffer overflow in Symantec Endpoint Protection SEP 11.0.600x through 11.0.710x and Symantec Network Access Control SNAC 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script...

CVE-2012-0294

Affected product/component: Symantec Endpoint Protection Manager (SEP Manager) for SEP 12.1.x. Issue summary: A directory traversal vulnerability in the SEP Manager service (management console) allows remote attackers to delete files via unspecified vectors, potentially enabling further abuse. Ro...

Symantec End Point Protection 11.x / Symantec Network Access Control 11.x - Local Code Execution (PoC)

Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP SP2 English Windows XP SP3 English Windows Vista 32Bit Windows 7 32Bit CVE : CVE-2012-0289 Time Lin...

Symantec Endpoint Protection Multiple Issues

SUMMARY Specific versions of the Symantec Endpoint Protection Management Console in Symantec Endpoint Protection 11.x and Symantec Network Access Control 11.x are susceptible to a potential local access elevation of privilege. The Management Console in Symantec Endpoint Protection 12.1 is...

Symantec Endpoint Protection Manager 11.x Denial of Service

SUMMARY Versions of Symantec Endpoint Protection Manager 11.0 running the Network Threat Protection module on Windows Server 2003 are susceptible to a Denial of ServiceDoS. Successful exploitation could potentially result in the system hosting Symantec Endpoint Protection Manager becoming...

CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

CVE-2012-1421

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE:...