527 matches found
Symantec Endpoint Protection Manager Authentication Bypass and Code Execution
This module exploits three separate vulnerabilities in Symantec Endpoint Protection Manager in order to achieve a remote shell on the box as NT AUTHORITY\SYSTEM. The vulnerabilities include an authentication bypass, a directory traversal and a privilege escalation to get privileged code execution...
Symantec Endpoint Protection Multiple Issues
SUMMARY The management console for Symantec Endpoint Protection Manager SEPM is susceptible to multiple vulnerabilities including SQL Injection, authentication bypass, possible path traversal and the potential for arbitrary file read/write. SEP clients are susceptible to a binary planting...
Symantec EP 12.1.4013 Denial Of Service
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-SYMANTEC0707.txt Vendor: ================================ Symantec www.symantec.com Product: ================================ Symantec EP 12.1.4013 Advisory Information:...
Symantec Endpoint Protection Manager < 12.1 RU6 Multiple Vulnerabilities (SYM15-005)
The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 12.1 RU6. It is, therefore, affected by the following vulnerabilities : - A DLL injection vulnerability exists due to improper path restrictions when loading DLLs. An authenticated, local attacker ca...
Symantec Endpoint Protection 'sysplant.sys' Denial of Service Vulnerability
Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. A security vulnerability exists in Symantec Endpoint Protection 'sysplant.sys' that allows a local user to send specially formatted calls to trigger a deadlock, whic...
Symantec Endpoint Protection Management Console SQL Injection Vulnerability
Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection management console fails to properly validate user input and administrators with low privileges can perform SQL injection attacks with...
Symantec Endpoint Protection DLL Load Arbitrary Code Execution Vulnerability
Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection loads DLLs with a security vulnerability that allows an attacker to construct a malicious DLL, place it on a network share or in a speci...
Symantec Endpoint Protection Manager Detection
Binary data 8764.prm...
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20141106-0 ======================================================================= title: XXE & XSS & Arbitrary File Write vulnerabilities product: Symantec Endpoint Protection vulnerable version: 12.1.4023.4080...
SEC Consult SA-20141106-0 :: XXE & XSS & Arbitrary File Write vulnerabilities in Symantec Endpoint Protection
SEC Consult Vulnerability Lab Security Advisory 20141106-0 ======================================================================= title: XXE & XSS & Arbitrary File Write vulnerabilities product: Symantec Endpoint Protection vulnerable version: 12.1.4023.4080 fixed version: 12.1.5 RU 5 impact:...
Symantec Endpoint Protection multiple security vulnerabilities
XSS, XXE, unauthroized files access...
Symantec Endpoint Protection Manager < 12.1 RU5 Multiple Vulnerabilities (SYM14-015)
The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is 12.1 prior to 12.1 RU5. It is, therefore, affected by the following vulnerabilities : - An XML external entity XXE injection vulnerability due to improper validation of XML external entities. A remote attacke...
CVE-2014-3437
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...
CVE-2014-3439
ConsoleServlet in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors...
Xxe
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Code injection
ConsoleServlet in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors...
CVE-2014-3438
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 is affected by CVE-2014-3438, a reflected Cross-Site Scripting (XSS) vulnerability in the console interface (notably via the ErrorMsg handling in SSO-Error.jsp and related UI paths). Exploitation could allow an attacker to inject script ...
CVE-2014-3439
ConsoleServlet in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors...
CVE-2014-3437
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...