CVE-2015-8801

Race condition in the client in Symantec Endpoint Protection SEP 12.1 before RU6 MP5 allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the SEP device manager recognizes a new USB device...

Symantec Endpoint Protection Manager Cross-Site Request Forgery Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. A cross-site request forgery vulnerability exists in SEPM version 12.1. An attacker coul...

Symantec Endpoint Protection Client Competitive Conditions Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec Corporation. It provides security across physical and virtual systems, and SEP Client is the client software. A competitive condition vulnerability exists in SEP Client version 12.1. An attacker with local access coul...

Symantec Endpoint Protection Manager and Client Information Disclosure Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec Corporation. The software provides security across physical and virtual systems.SEP Manager and Client are the management and client software. An information disclosure vulnerability exists in the management console o...

Symantec Endpoint Protection Manager and Client Directory Traversal Vulnerability

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec Corporation. The software provides security across physical and virtual systems.SEP Manager and Client are the management and client software. A directory traversal vulnerability exists in the management console of SE...

Symantec Endpoint Protection Manager 12.1.x < 12.1 RU6 MP5 Multiple Vulnerabilities (SYM16-011)

The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 12.1 RU6 MP5. It is, therefore, affected by the following vulnerabilities : - A race condition exists in the SEP client that allows a local attacker to bypass security restrictions, resulting in the...

Symantec Endpoint Protection Manager and Client Server-Side Request Forgery Vulnerability

Symantec Endpoint Protection SEP is the United States Symantec Symantec company's set of antivirus software the software can provide security across physical and virtual systems SEP Manager and Client is one of the management and client software. A server-side request forgery vulnerability exists...

Symantec Endpoint Protection Manager 12.1 - Multiple Vulnerabilities

Credits: John Page aka HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SYMANTEC-SEPM-MULTIPLE-VULNS.txt + ISR: ApparitionSec Vendor: ================ www.symantec.com Product: =========== SEPM Symantec Endpoint Protection Manager and client v12.1...

Symantec AntiVirus - Unpacking RAR Multiple Remote Memory Corruptions

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=810 A major component of the Symantec Antivirus scan engine is the "Decomposer", responsible for unpacking various archive formats such as ZIP, RAR, and so on. The decomposer runs as NT AUTHORITY\SYSTEM on Windows, and root on Linu...

How to Compromise the Enterprise Endpoint

Posted by Tavis Ormandy. Symantec is a popular vendor in the enterprise security market, their flagship product is Symantec Endpoint Protection. They sell various products using the same core engine in several markets, including a consumer version under the Norton brand. Today we’re publishing...

Symantec Endpoint Protection Client < 12.1 RU6 MP4 SysPlant.sys Driver RCE (SYM16-003)

The version of Symantec Endpoint Protection Client running on the remote host is 12.1 prior to 12.1 RU6 MP4. It is, therefore, affected by a remote code execution vulnerability due to insecure permissions for the SysPlant.sys driver. A remote attacker can exploit this, via a crafted HTML document...

Symantec Endpoint Protection Manager < 12.1 RU6 MP4 Multiple Vulnerabilities (SYM16-003)

The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 12.1 RU6 MP4. It is, therefore, affected by the following vulnerabilities : - A cross-site request forgery XSRF vulnerability exists due to HTTP requests to logging scripts not requiring multiple...

Symantec Endpoint Protection Manager and Client SQL Injection Vulnerability

Symantec Endpoint Protection is a suite of antivirus software from Symantec Corporation in the U.S. SEP Manager and Client are the management and client software. A SQL injection vulnerability exists in Symantec Endpoint Protection Manager and Client, which allows remote attackers to exploit the...

Symantec Endpoint Protection Manager and Client Cross-Site Scripting Vulnerability

Symantec Endpoint Protection is a suite of antivirus software from Symantec Corporation in the U.S. SEP Manager and Client are the management and client software. A cross-site scripting vulnerability exists in Symantec Endpoint Protection Manager and Client, which allows remote attackers to explo...

Symantec Endpoint Protection Manager and Client Arbitrary Code Execution Vulnerability

Symantec Endpoint Protection is a suite of antivirus software from Symantec Corporation in the U.S. SEP Manager and Client are the management and client software. Symantec Endpoint Protection Manager and Client Sysplant.sys file for difficult to fully validate external data, allowing remote...

CVE-2015-8154

The SysPlant.sys driver in the Application and Device Control ADC component in the client in Symantec Endpoint Protection SEP 12.1 before RU6-MP4 allows remote attackers to execute arbitrary code via a crafted HTML document, related to "RWX Permissions."...

CVE-2015-8152

Cross-site request forgery CSRF vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script...

Hardcoded credentials

The SysPlant.sys driver in the Application and Device Control ADC component in the client in Symantec Endpoint Protection SEP 12.1 before RU6-MP4 allows remote attackers to execute arbitrary code via a crafted HTML document, related to "RWX Permissions."...

CVE-2015-8152

Cross-site request forgery CSRF vulnerability in Symantec Endpoint Protection Manager SEPM 12.1 before RU6-MP4 allows remote authenticated users to hijack the authentication of administrators for requests that execute arbitrary code by adding lines to a logging script...