CVE-2017-13681

Symantec Endpoint Protection prior to SEP 12.1 RU6 MP9 could be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels. In the circumstances of this issue, the...

Symantec Endpoint Protection Multiple Issues

SUMMARY Symantec has released a set of updates to address three issues in the Symantec Endpoint Protection SEP product. AFFECTED PRODUCTS Symantec Endpoint Protection SEP --- CVE | Affected Versions | Remediation CVE-2017-13681 | Prior to 12.1 RU6 MP9 | Upgrade to 12.1 RU6 MP9 Symantec Endpoint...

Symantec Endpoint Protection Client 12.1.x < 12.1 RU6 MP7 / 14.0.x < 14.0 MP1 Command Injection (SYM17-002)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x prior to 12.1 RU6 MP7 or 14.0.x prior to 14.0 MP1. It is, therefore, affected by a command injection vulnerability when handling quarantine logs due to file metadata being improperly interpreted and...

Symantec Endpoint Protection Client 12.1.x < 12.1 RU6 MP7 Local Privilege Escalation (SYM17-002)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x prior to 12.1 RU6 MP7. It is, therefore, affected by a local privilege escalation vulnerability in the SymEvent driver due to improper validation of user-supplied input. A local attacker can exploit this...

Symantec Endpoint Protection Client < 22.8.0.50 Elevation of Privilege (SYM16-021)

The version of Symantec Endpoint Protection SEP Client installed on the remote Windows host is prior to 22.8.0.50. It is, therefore, affected by an elevation of privilege vulnerability due to improper path restrictions when loading DLL files. A local attacker can exploit this, by placing a...

Symantec Endpoint Protection Small Business Edition Unsupported Version Detection

According to its self-reported version, the installation of Symantec Endpoint Protection SEP on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilitie...

Symantec Endpoint Protection Client 12.1.x < 12.1.6 MP6 Multiple DoS (SYM16-015)

The version of Symantec Endpoint Protection SEP Client installed on the remote Windows host is 12.1.x prior to 12.1.6 MP6 or else 12.1.6 MP5 without a hotfix. It is, therefore, affected by multiple denial of service vulnerabilities : - A denial of service vulnerability exists in the decomposer...

Memory Corruption Vulnerability in Multiple Symantec Products

Symantec Advanced Threat Protection: Network ATP and others are security products from Symantec, a suite of software that mines and removes advanced threats from endpoints, networks, and email gateways; Symantec Endpoint Protection SEP, a suite of antivirus software; and Symantec Endpoint...

Symantec Endpoint Protection Manager Open Redirect Report-Routing Component (CVE-2016-5304)

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. A remote attacker could exploit these...

WebsphereJBossOpenNMSSymantec Endpoint Protection Manager - Java Deserialization Remote Code Execution

WebsphereJBossOpenNMSSymantec Endpoint Protection Manager - Java Deserialization Remote Code Execution ! /bin/bash/env python3 / | | | | | \ \ / \ '| |/ | |/ | / | '| | / | | | | | | | | || | | |/ || ||,||,|\/|| By Nikhil Sreekumar @roo7break import sys import base64 import httplib2 import...

CVE-2016-5308

The Client Intrusion Detection System CIDS driver before 15.0.6 in Symantec Endpoint Protection SEP and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service memory corruption and system crash via a malformed Portable Executable PE file...

Memory corruption

The Client Intrusion Detection System CIDS driver before 15.0.6 in Symantec Endpoint Protection SEP and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service memory corruption and system crash via a malformed Portable Executable PE file...

CVE-2016-5308

The Client Intrusion Detection System CIDS driver before 15.0.6 in Symantec Endpoint Protection SEP and before 15.1.2 in Norton Security allows remote attackers to cause a denial of service memory corruption and system crash via a malformed Portable Executable PE file...

Symantec Endpoint Protection Multiple Vulnerabilities (Jul 2016)

Symantec Endpoint Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Endpoint Protection Manager Privilege Bypass Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. A privilege bypass vulnerability exists in SEPM version 12.1, which can be exploited by an attacker to bypass the lockout threshold restriction with authorized window access...

Symantec Endpoint Protection Manager and Client Unauthorized Access Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, Inc.SEP Manager and Client are the management and client software. An unauthorized access vulnerability exists in SEP Manager and Client version 12.1, which can be exploited by an attacker to access the PHP JSESSIONI...

Symantec Endpoint Protection Manager and Client Information Disclosure Vulnerability (CNVD-2016-04461)

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, Inc.SEP Manager and Client are the management and client software. An information disclosure vulnerability exists in SEP Manager and Client version 12.1, which can be exploited by an attacker to disclose server...

Symantec Endpoint Protection Manager and Client Privilege Gain Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, Inc.SEP Manager and Client are the management and client software. A privilege acquisition vulnerability exists in SEP Manager and Client version 12.1, which can be exploited by an attacker to obtain a valid system...

CVE-2016-5305

Multiple cross-site scripting XSS vulnerabilities in management scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allow remote authenticated users to inject arbitrary web script or HTML via a "DOM link manipulation" attack...

CVE-2016-5304

Open redirect vulnerability in a report-routing component in Symantec Endpoint Protection Manager SEPM 12.1 before RU6 MP5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...