Protecting Your Small Business From WannaCry

May 12, 2017 saw the world’s first ever worm-based ransomware attack, WannaCry. Typically ransomware spreads via email as spam and phishing attacks, and relies on human intervention to initiate the infection. However, WannaCry is different in that it combines ransomware with a recently published...

Microsoft Windows 8 / 8.1 / 10 / Windows Server / SCEP, Microsoft Security Essentials - MsMpEng Remo

Exploit for windows platform in category remote exploits Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1252&desc=5 MsMpEng is the Malware Protection service that is enabled by default on Windows 8, 8.1, 10, Windows Server 2012, and so on. Additionally, Microsoft Security...

Symantec Endpoint Protection Small Business Edition RAR File Parser DoS Vulnerabilities

Symantec Endpoint Protection Small Business Edition is prone to denial of service vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Symantec Endpoint Protection Client 12.1.x < 12.1 RU6 MP7 Local Privilege Escalation (SYM17-002)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x prior to 12.1 RU6 MP7. It is, therefore, affected by a local privilege escalation vulnerability in the SymEvent driver due to improper validation of user-supplied input. A local attacker can exploit this...

Symantec Endpoint Protection Client < 22.8.0.50 Elevation of Privilege (SYM16-021)

The version of Symantec Endpoint Protection SEP Client installed on the remote Windows host is prior to 22.8.0.50. It is, therefore, affected by an elevation of privilege vulnerability due to improper path restrictions when loading DLL files. A local attacker can exploit this, by placing a...

Symantec Endpoint Protection Small Business Edition Unsupported Version Detection

According to its self-reported version, the installation of Symantec Endpoint Protection SEP on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilitie...

Avast Endpoint Protection Suite Plus Version Detection

Detects the installed version of Avast Endpoint Protection Suite Plus. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Avast Endpoint Protection Suite Version Detection

Detects the installed version of Avast Endpoint Protection Suite. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Avast Endpoint Protection Plus Version Detection

Detects the installed version of Avast Endpoint Protection Plus. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Avast Endpoint Protection Plus Sandbox Escape Security Bypass Vulnerability

Avast Endpoint Protection Plus is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avast Endpoint Protection Suite Sandbox Escape Security Bypass Vulnerability

Avast Endpoint Protection Suite is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avast Endpoint Protection Suite Plus Sandbox Escape Security Bypass Vulnerability

Avast Endpoint Protection Suite Plus is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Avast Endpoint Protection Version Detection

Detects the installed version of Avast Endpoint Protection. The script logs in via smb, searches for string SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2016-4025

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email...

CVE-2016-4025

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, Endpoint Protection Suite Plus v8.x.x, File Server Security v8.x.x, and Email...

Symantec Endpoint Protection Manager Remote Privilege Escalation (CVE-2015-1487; CVE-2015-1489)

A vulnerability exist in Symantec Endpoint protection. These vulnerability include privilege escalation, path traversal and binary planting. Attackers can exploit this issue to gain elevated privileges on the affected computer...

Symantec Endpoint Protection Client 12.1.x < 12.1.6 MP6 Multiple DoS (SYM16-015)

The version of Symantec Endpoint Protection SEP Client installed on the remote Windows host is 12.1.x prior to 12.1.6 MP6 or else 12.1.6 MP5 without a hotfix. It is, therefore, affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists in the decomposer...

Memory Corruption Vulnerability in Multiple Symantec Products

Symantec Advanced Threat Protection: Network ATP and others are security products from Symantec, a suite of software that mines and removes advanced threats from endpoints, networks, and email gateways; Symantec Endpoint Protection SEP, a suite of antivirus software; and Symantec Endpoint...

Symantec Decomposer Engine Security Update

SUMMARY Symantec has released an update to address two issues in the RAR file parser component of the antivirus decomposer engine used by multiple Symantec products. Parsing of maliciously formatted RAR container files may cause an application-level denial of service condition. AFFECTED PRODUCTS...

Symantec Endpoint Protection Manager Cross Site Request Forgery (CVE-2016-3653)

A Cross Site Request Forgery vulnerability has been reported in the Symantec Endpoint Protection Manager. The vulnerability is due to insufficient CSRF protections. A remote, unauthenticated attacker can exploit this vulnerability by enticing a user to visit a page. Successful exploitation could...