CVE-2012-0289

CVE-2012-0289 affects Symantec Endpoint Protection and Symantec Network Access Control (SEP/SNAC) on Windows. The issue is a buffer overflow in SEP/SNAC components (notably SemSvc/AgentServlet) that, via crafted input, allowed local users to gain privileges and potentially cause data modification...

CVE-2012-0294

Affected product/component: Symantec Endpoint Protection Manager (SEP Manager) for SEP 12.1.x. Issue summary: A directory traversal vulnerability in the SEP Manager service (management console) allows remote attackers to delete files via unspecified vectors, potentially enabling further abuse. Ro...

CVE-2012-0295

Affected product: Symantec Endpoint Protection Manager (SEP MGR)

CVE-2012-0289

Buffer overflow in Symantec Endpoint Protection SEP 11.0.600x through 11.0.710x and Symantec Network Access Control SNAC 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script...

PT-2012-2470

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions prior to 12.1 RU1-MP1 Description A directory traversal issue exists in the Manager service of the management console, allowing remote attackers to delete files. Recommendations For versions prior to 12.1...

CVE-2012-0294: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to delete files via unspecified vectors...

CVE-2012-0289: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in Symantec Endpoint Protection SEP 11.0.600x through 11.0.710x and Symantec Network Access Control SNAC 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script...

CVE-2012-0295: Improper Control of Generation of Code

The Manager service in the management console in Symantec Endpoint Protection SEP 12.1 before 12.1 RU1-MP1 allows remote attackers to conduct file-insertion attacks and execute arbitrary code by leveraging exploitation of CVE-2012-0294...

PT-2012-2471

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection SEP versions 12.1 through 12.1 before RU1-MP1 Description The issue allows remote attackers to conduct file-insertion attacks and execute arbitrary code. This is achieved by leveraging exploitation in the Manager...

PT-2012-3568

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions 11.0.600x through 11.0.700x Description The issue allows remote attackers to cause a denial of service, resulting in a web-server outage, or daemon crash or hang, via a flood of packets that triggers...

PT-2012-2465

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions 11.0.600x through 11.0.710x Symantec Network Access Control versions 11.0.600x through 11.0.710x Description The issue allows local users to gain privileges, modify data, or cause a denial of service via a...

Symantec End Point Protection 11.x / Symantec Network Access Control 11.x - Local Code Execution (PoC)

Symantec End Point Protection 11.x & Symantec Network Access Control 11.x Local Code Execution POC Date: 22/05/2012 Author: 41.w4r10r Software Link: Symantec.com Version: 11.x Tested on: Windows XP SP2 English Windows XP SP3 English Windows Vista 32Bit Windows 7 32Bit CVE : CVE-2012-0289 Time Lin...

Symantec Endpoint Protection Multiple Issues

SUMMARY Specific versions of the Symantec Endpoint Protection Management Console in Symantec Endpoint Protection 11.x and Symantec Network Access Control 11.x are susceptible to a potential local access elevation of privilege. The Management Console in Symantec Endpoint Protection 12.1 is...

Symantec Endpoint Protection Manager 11.x Denial of Service

SUMMARY Versions of Symantec Endpoint Protection Manager 11.0 running the Network Threat Protection module on Windows Server 2003 are susceptible to a Denial of ServiceDoS. Successful exploitation could potentially result in the system hosting Symantec Endpoint Protection Manager becoming...

CVE-2012-1443

The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal aka Cat QuickHeal 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft Anti-Malware 5.1.0....

CVE-2012-1421

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE:...

CVE-2012-1421

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE:...

Design/Logic Flaw

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE:...

CVE-2012-1462

The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal aka Cat QuickHeal 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900,...

CVE-2012-1421

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE:...