CVE-2012-1456

The TAR file parser in AVG Anti-Virus 10.0.0.1190, Quick Heal aka Cat QuickHeal 11.00, Comodo Antivirus 7424, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, F-Prot Antivirus 4.6.2.117, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus...

CVE-2012-1421

The CVE-2012-1421 entry affects the TAR file parser in Quick Heal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11. The flaw allows remote attackers to bypass malware detection by feeding a POSIX TAR file with an initial ...

CVE-2012-1421: Undefined Security Weakness

The TAR file parser in Quick Heal aka Cat QuickHeal 11.00, Norman Antivirus 6.06.12, Rising Antivirus 22.83.00.03, and AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11 allows remote attackers to bypass malware detection via a POSIX TAR file with an initial MSCF character sequence. NOTE:...

CVE-2012-1462: Undefined Security Weakness

The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal aka Cat QuickHeal 11.00, Emsisoft Anti-Malware 5.1.0.1, eSafe 7.0.17.0, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900,...

CVE-2012-1446: Undefined Security Weakness

The ELF file parser in Quick Heal aka Cat QuickHeal 11.00, McAfee Anti-Virus Scanning Engine 5.400.0.1158, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Norman Antivirus 6.06.12, eSafe 7.0.17.0, Kaspersky Anti-Virus 7.0.0.125, McAfee Gateway formerly Webwasher 2010.1C, Sophos...

PT-2012-3287

Name of the Vulnerable Software and Affected Versions AhnLab V3 Internet Security version 2011.01.18.00 AVG Anti-Virus version 10.0.0.1190 Quick Heal version 11.00 Emsisoft Anti-Malware version 5.1.0.1 eSafe version 7.0.17.0 Fortinet Antivirus version 4.2.254.0 Ikarus Virus Utilities T3 Command...

CVE-2012-1459: Undefined Security Weakness

The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal aka Cat QuickHeal 11.00, ClamAV 0.96.4, Command Antivirus 5.2.11.5, Comodo...

PT-2012-3246

Name of the Vulnerable Software and Affected Versions Quick Heal versions 11.00 Norman Antivirus version 6.06.12 Rising Antivirus version 22.83.00.03 Symantec Endpoint Protection version 11 Description The issue concerns a TAR file parser that allows remote attackers to bypass malware detection...

CVE-2012-1425: Undefined Security Weakness

The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal aka Cat QuickHeal 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Virus 7.0.0.125, McAfe...

Symantec Endpoint Protection Manager TestConnection.jsp 'Msg' Parameter XSS (SYM11-009 & SYM12-001)

The version of Symantec Endpoint Protection Manager running on the remote web server is affected by a cross-site scripting XSS vulnerability due to improper sanitization of input to the 'Msg' parameter in the TestConnection.jsp file. An unauthenticated, remote attacker can exploit this...

Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site Scripting

SUMMARY Symantec Endpoint Protection Manager 12.1 web console is susceptible to cross-site scripting and cross-site request forgery that could potentially lead to arbitrary code execution. AFFECTED PRODUCTS Product | Version | Build | Solutions ---|---|---|--- Symantec Endpoint Protection | 12.1 ...

Symantec Endpoint Protection Manager XSS and CSRF Vulnerabilities

Symantec Endpoint Protection Manager is prone to cross-site scripting XSS and cross-site request forgery CSRF vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

McAfee SaaS Endpoint Protection Version Detection (Windows)

This script finds the installed McAfee SaaS Endpoint Protection version and saves the result in KB. OpenVAS Vulnerability Test $Id: secpodmcafeesaasendpointprotectiondetect.nasl 7293 2017-09-27 08:49:48Z cfischer $ McAfee SaaS Endpoint Protection Version Detection Windows Authors: Sooraj KS...

McAfee SaaS Endpoint Protection ActiveX Controls Multiple Code Execution Vulnerabilities

This host is installed with McAfee SaaS Endpoint Protection and is prone to multiple code execution vulnerabilities. OpenVAS Vulnerability Test $Id: secpodmcafeesaasendpointprotectionmultcodeexecvuln.nasl 7029 2017-08-31 11:51:40Z teissa $ McAfee SaaS Endpoint Protection ActiveX Controls Multiple...

McAfee SaaS Endpoint Protection ActiveX Controls Multiple Code Execution Vulnerabilities

McAfee SaaS Endpoint Protection is prone to multiple code execution vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

McAfee SaaS Endpoint Protection Detection (Windows SMB Login)

This script finds the installed McAfee SaaS Endpoint Protection version. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-0550

Multiple cross-site scripting XSS vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via 1 the token parameter to portal/Help.jsp or 2 the URI in a...

CVE-2011-0551

Cross-site request forgery CSRF vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the Web Interface in the Endpoint Protection Manager in Symantec Endpoint Protection SEP 11.0.600x through 11.0.6300 allow remote attackers to inject arbitrary web script or HTML via 1 the token parameter to portal/Help.jsp or 2 the URI in a...