732 matches found
Symantec Endpoint Protection DLL Load Arbitrary Code Execution Vulnerability
Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection loads DLLs with a security vulnerability that allows an attacker to construct a malicious DLL, place it on a network share or in a speci...
Symantec Endpoint Protection 'sysplant.sys' Denial of Service Vulnerability
Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. A security vulnerability exists in Symantec Endpoint Protection 'sysplant.sys' that allows a local user to send specially formatted calls to trigger a deadlock, whic...
Symantec Endpoint Protection Management Console SQL Injection Vulnerability
Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection management console fails to properly validate user input and administrators with low privileges can perform SQL injection attacks with...
Symantec Endpoint Protection Manager Detection
Binary data 8764.prm...
Symantec Endpoint Protection 12.1.4023.4080 - Multiple Vulnerabilities
No description provided by source. SEC Consult Vulnerability Lab Security Advisory 20141106-0 ======================================================================= title: XXE & XSS & Arbitrary File Write vulnerabilities product: Symantec Endpoint Protection vulnerable version: 12.1.4023.4080...
Symantec Endpoint Protection multiple security vulnerabilities
XSS, XXE, unauthroized files access...
Symantec Endpoint Protection Manager < 12.1 RU5 Multiple Vulnerabilities (SYM14-015)
The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is 12.1 prior to 12.1 RU5. It is, therefore, affected by the following vulnerabilities : - An XML external entity XXE injection vulnerability due to improper validation of XML external entities. A remote attacke...
SEC Consult SA-20141106-0 :: XXE & XSS & Arbitrary File Write vulnerabilities in Symantec Endpoint Protection
SEC Consult Vulnerability Lab Security Advisory 20141106-0 ======================================================================= title: XXE & XSS & Arbitrary File Write vulnerabilities product: Symantec Endpoint Protection vulnerable version: 12.1.4023.4080 fixed version: 12.1.5 RU 5 impact:...
CVE-2014-3437
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...
CVE-2014-3439
ConsoleServlet in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors...
Xxe
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...
Code injection
ConsoleServlet in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in console interface scripts in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2014-3437
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...
CVE-2014-3439
ConsoleServlet in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors...
CVE-2014-3438
Symantec Endpoint Protection Manager (SEPM) 12.1 before RU5 is affected by CVE-2014-3438, a reflected Cross-Site Scripting (XSS) vulnerability in the console interface (notably via the ErrorMsg handling in SSO-Error.jsp and related UI paths). Exploitation could allow an attacker to inject script ...
CVE-2014-3437: Undefined Security Weakness
The management console in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External...
PT-2014-5324
Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1 before RU5 Description The issue allows remote attackers to write to arbitrary files. Recommendations For Symantec Endpoint Protection Manager SEPM versions 12.1 through 12.1...
PT-2014-5323
Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 12.1 RU5 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the console interface scripts. These vulnerabilities allow remote attackers to inject arbitrary...
CVE-2014-3439: Undefined Security Weakness
ConsoleServlet in Symantec Endpoint Protection Manager SEPM 12.1 before RU5 allows remote attackers to write to arbitrary files via unspecified vectors...