CVE-2013-5011: Improper Limitation of a Pathname to a Restricted Directory

Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection SEP 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE%...

CVE-2013-5009: Improper Authentication

The Management Console in Symantec Endpoint Protection SEP 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging acces...

PT-2014-2891

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions 11.x through 11.0.7.3 Symantec Endpoint Protection versions 12.x through 12.1.2 RU1 Symantec Endpoint Protection Small Business Edition versions 12.x through 12.1.2 RU1 Description The issue allows local...

PT-2014-2892

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions 11.x through 11.0.7.3 Symantec Endpoint Protection versions 12.x through 12.1.2 RU1 Symantec Endpoint Protection Small Business Edition versions 12.x through 12.1.2 RU1 Description The issue allows local...

Symantec Endpoint Protection Privilege Assumption, Policy Bypass, Local Elevation of Privilege

SUMMARY The Management Console in Symantec Endpoint Protection does not properly validate user authentication, which could potentially allow a user to assume another users identity and privileges on the console. Symantec Endpoint Protection clients do not sufficiently restrict custom policies,...

Symantec Endpoint Protection 12.1.2015.2015 Uninstall

Hi list, Description: --------------------------------------------- A weakness has been revealed on SEP installation that allows user to uninstall this product without previous knowledge of the un-installation password. Affected version: 12.1.2015.2015 Affected OS: Windows XP Details:...

Symantec Endpoint Protection Center (SPC) Small Business Edition Buffer Overflow Vulnerability

The host is installed with Symantec Endpoint Protection Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecepmsbebofvuln.nasl 6104 2017-05-11 09:03:48Z teissa $ Symantec Endpoint Protection Center SPC Small Business Edition Buffer Overflow Vulnerabili...

Symantec Endpoint Protection Manager (SEPM) Buffer Overflow Vulnerability

The host is installed with Symantec Endpoint Protection Manager and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecepmbofvuln.nasl 6074 2017-05-05 09:03:14Z teissa $ Symantec Endpoint Protection Manager SEPM Buffer Overflow Vulnerability Authors: Thanga Praka...

Symantec Endpoint Protection Manager (SEPM) Buffer Overflow Vulnerability

Symantec Endpoint Protection Manager is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if descriptio...

CVE-2013-1612

Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager SEPM 12.1.x before 12.1.3, and Symantec Endpoint Protection Center SPC Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2013-1612: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in secars.dll in the management console in Symantec Endpoint Protection Manager SEPM 12.1.x before 12.1.3, and Symantec Endpoint Protection Center SPC Small Business Edition 12.0.x, allows remote attackers to execute arbitrary code via unspecified vectors...

PT-2013-3275

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions 12.1.x through 12.1.2 Symantec Endpoint Protection Center Small Business Edition versions 12.0.x Description A buffer overflow issue exists in the secars.dll component of the management console,...

Symantec Endpoint Protection Manager < 12.1 RU3 (SYM13-005) (credentialed check)

The version of Symantec Endpoint Protection Manager installed on the remote host is a version prior to 12.1 RU3. It is, therefore, potentially affected by a buffer overflow vulnerability in the 'secars.dll' component. By exploiting this flaw, a remote, unauthenticated attacker could execute...

Symantec Endpoint Protection Management Console RCE Vulnerability

Symantec Endpoint Protection is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2012-4348

The management console in Symantec Endpoint Protection SEP 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via...

Input validation

The management console in Symantec Endpoint Protection SEP 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via...

CVE-2012-4348

The management console in Symantec Endpoint Protection SEP 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via...

PT-2012-5347

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions 11.0 through 11.0 RU7-MP2 Symantec Endpoint Protection versions 12.1 through 12.1 RU1 Symantec Endpoint Protection Small Business Edition versions 12.0 through 12.1 RU1 Description The management console i...

CVE-2012-4348: Improper Input Validation

The management console in Symantec Endpoint Protection SEP 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via...

Symantec Endpoint Protection Management Consoles Multiple Issues

SUMMARY The management console in Symantec Endpoint Protection Manager SEPM and Symantec Protection Center SPC for SEP 12.0 Small Business Edition, contains PHP scripts that do not properly validate external input. This could potentially result in remote code execution. Symantec Network Access...