Medibank Private Finds the Cure for Ransomware with Carbon Black

Editor's Note: A form of this article originally appeared on CSO.com. Like most large businesses, health insurer Medibank Private was regularly experiencing a few of what CISO Stuart Harrison calls “significant incidents” every month. Its predominantly antivirus-based security defences were missi...

Symantec Endpoint Protection Client 12.1.x < 12.1 RU6 MP10 / 14.0.x < 14.0 RU1 MP1 Multiple Vulnerabilities (SYMSA1454)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x prior to 12.1 RU6 MP10 or 14.0.x prior to 14.0 RU1 MP1. It is, therefore, affected by a multiple vulnerabilities as referenced in the advisory. Note that Nessus has not tested for this issue but has...

Symantec Endpoint Protection Local Denial of Service Vulnerability (CNVD-2018-11984)

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security across physical and virtual systems. A competitive condition vulnerability exists in Symantec SEP versions prior to 14 RU1 MP1 and prior to 12.1 RU6 MP10. An attacker could exploit...

Symantec Endpoint Protection Elevation of Privilege Vulnerability (CNVD-2018-11968)

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security across physical and virtual systems. A boost vulnerability exists in Symantec SEP versions prior to 14 RU1 MP1 and prior to 12.1 RU6 MP10. An attacker could exploit this...

Privilege escalation

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels...

Race condition

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition or race hazard. This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events...

CVE-2018-5237

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels...

CVE-2018-5236

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition or race hazard. This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events...

CVE-2018-5237

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels...

CVE-2018-5236

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition or race hazard. This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events...

CVE-2018-5237

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels...

CVE-2018-5236

Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition or race hazard. This type of issue occurs in software where the output is dependent on the sequence or timing of other uncontrollable events...

CVE-2018-5236

Symantec Endpoint Protection (SEP) has a race-condition vulnerability CVE-2018-5236 (and related CVE-2018-5237) affecting SEP Client 12.1.x before 12.1 RU6 MP10 or 14.0.x before 14.0 RU1 MP1. Risk is described as a race condition in Windows SEP endpoints. Remediation: upgrade to SEP 14 RU1 MP1 or...

CVE-2018-5237

CVE-2018-5237 corresponds to a privilege-escalation vulnerability in Symantec Endpoint Protection (SEP) Windows endpoints. Affected versions are SEP before 14 RU1 MP1 or 12.1 RU6 MP10; the issue is addressed by upgrading to SEP 14 RU1 MP1 or 12.1 RU6 MP10 and later. The connected advisory confirm...

10 Endpoint Security Problems Solved by the Cloud – An Introduction

Question: Where do 70% of successful breaches begin? Answer: The endpoint. The State of Endpoint Security Traditional defensive security solutions are fighting a losing battle against hackers and malware. With each day, new attacks and viruses appear and keeping systems safe is like bailing out a...

Symantec Endpoint Protection Multiple Issues

SUMMARY Symantec has released a set of updates to address issues that were discovered in the Symantec Endpoint Protection product. AFFECTED PRODUCTS Symantec Endpoint Protection --- CVE | Affected Versions | Remediation CVE-2018-5236 CVE-2018-5237 | Prior to 14 RU1 MP1 or 12.1 RU6 MP10 | Upgrade ...

CVE-2016-9093

A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user input. SEP 14.0 and later are not impacted by this issue. A non-admin user would need to be able to save an executable file to disk and then be able t...

CVE-2016-9093

A version of the SymEvent Driver that shipped with Symantec Endpoint Protection 12.1 RU6 MP6 and earlier fails to properly sanitize logged-in user input. SEP 14.0 and later are not impacted by this issue. A non-admin user would need to be able to save an executable file to disk and then be able t...

CVE-2016-9094

Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality. The quarantine logs can be exported for review by the user in a variety of formats including .CSV files. Prior to 14.0 MP1 and 12.1 RU6 MP7, the potential exists for file...

CVE-2016-9094

Symantec Endpoint Protection clients place detected malware in quarantine as part of the intended product functionality. The quarantine logs can be exported for review by the user in a variety of formats including .CSV files. Prior to 14.0 MP1 and 12.1 RU6 MP7, the potential exists for file...