25 matches found
EUVD-2018-16649
Malware in sbrugna...
EUVD-2018-20827
Malware in sbrugna...
Sophos Endpoint Protection 代码注入漏洞
Sophos Endpoint Protection is a network appliance from Sophos UK. It provides the function of blocking X endpoints. Sophos Endpoint Protection has a security vulnerability that can be exploited by an attacker who can bypass the restrictions of Sophos Endpoint Protection in order to escalate his...
PT-2020-20611
Name of the Vulnerable Software and Affected Versions Sophos Endpoint Protection versions prior to 2020-01-14 Sophos Cloud Optix versions prior to 2020-01-14 Sophos Mobile versions prior to 2020-01-14 Sophos Intercept X Endpoint versions prior to 2020-01-14 Sophos Intercept X for Server versions...
April 25, 2019—KB4493460 (Preview of Monthly Rollup)
None None...
April 9, 2019—KB4493458 (Security-only update)
None None...
April 9, 2019—KB4493448 (Security-only update)
None None...
April 9, 2019—KB4493450 (Security-only update)
None None...
April 9, 2019—KB4493471 (Monthly Rollup)
None None...
Sophos Endpoint Protection Plaintext Password Disclosure Vulnerability
Sophos Endpoint Protection helps protect your workstation by adding prevention, detection and response technologies to your operating system. A plaintext password disclosure vulnerability exists in Sophos Endpoint Protection 10.7. The vulnerability arises because Sophos Endpoint Protection uses...
Sophos Endpoint Protection Control Panel 10.7 - Weak Password Encryption
Sophos Endpoint Protection Control Panel 10.7 - Weak Password Encryption + Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-CONTROL-PANEL-v10.7-INSECURE-CRYPTO-CVE-2018-9233.txt + ISR: Apparition...
Sophos Endpoint Protection Control Panel 10.7 - Weak Password Encryption
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-CONTROL-PANEL-v10.7-INSECURE-CRYPTO-CVE-2018-9233.txt + ISR: Apparition Security Vendor: ========== www.sophos.com Product: =========== Sophos...
Sophos Endpoint Protection 10.7 - Tamper-Protection Bypass
Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SOPHOS-ENDPOINT-PROTECTION-v10.7-TAMPER-PROTECTION-BYPASS-CVE-2018-4863.txt + ISR: Apparition Security Vendor: ============= www.sophos.com Product: =========== Sophos...
Default credentials
Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers to determine a cleartext password, and subsequently choose unsafe malware settings, via rainbow tables or other...
CVE-2018-9233
Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers to determine a cleartext password, and subsequently choose unsafe malware settings, via rainbow tables or other...
CVE-2018-4863
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key...
CVE-2018-9233
Sophos Endpoint Protection 10.7 uses an unsalted SHA-1 hash for password storage in %PROGRAMDATA%\Sophos\Sophos Anti-Virus\Config\machine.xml, which makes it easier for attackers to determine a cleartext password, and subsequently choose unsafe malware settings, via rainbow tables or other...
PT-2018-18918
Name of the Vulnerable Software and Affected Versions Sophos Endpoint Protection version 10.7 Description The issue concerns the use of an unsalted SHA-1 hash for password storage in the machine.xml file, making it easier for attackers to determine the cleartext password via rainbow tables or oth...
CVE-2018-4863: Undefined Security Weakness
Sophos Endpoint Protection 10.7 allows local users to bypass an intended tamper protection mechanism by deleting the HKEYLOCALMACHINE\SYSTEM\CurrentControlSet\services\Sophos Endpoint Defense\ registry key...
PT-2018-16580
Name of the Vulnerable Software and Affected Versions Sophos Endpoint Protection version 10.7 Description The issue allows local users to bypass an intended tamper protection mechanism. This is achieved by deleting a specific registry key, HKEY LOCAL MACHINESYSTEMCurrentControlSetservicesSophos...