PT-2010-1931

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection versions 11.x through 11 RU6 MP1 Description The issue allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request...

Symantec Endpoint Protection Scan Bypass Vulnerability

The host is installed with Symantec Endpoint Protection and is possible to bypass security scan. OpenVAS Vulnerability Test $Id: secpodsymantecepointprtnsecbypassvuln.nasl 5401 2017-02-23 09:46:07Z teissa $ Symantec Endpoint Protection Scan Bypass Vulnerability Authors: Antu Sanadi Copyright:...

CVE-2009-1432: Improper Input Validation

Symantec Reporting Server, as used in Symantec AntiVirus SAV Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security SCS before 3.1 MR8, and the Symantec Endpoint Protection Manager SEPM component in Symantec Endpoint Protection SEP before 11.0 MR2, allows remote...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

Stack overflow

Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 AMS2, as used in Symantec System Center SSS; Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus SAV Corporate Edition 9 before 9.0...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

CVE-2009-1430

Multiple stack-based buffer overflows in IAO.EXE in the Intel Alert Originator Service in Symantec Alert Management System 2 AMS2, as used in Symantec System Center SSS; Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus SAV Corporate Edition 9 before 9.0...

CVE-2009-1429: Improper Control of Generation of Code

The Intel LANDesk Common Base Agent CBA in Symantec Alert Management System 2 AMS2, as used in Symantec System Center SSS; Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus SAV Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2...

CVE-2009-1428: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

Symantec Reporting Server Improper URL Handling Exposure

SUMMARY The login web page in some versions of Symantec Reporting Server contains a URL handling error which could potentially allow an attacker to launch a phishing attack. AFFECTED PRODUCTS Product | Affected Version | Solution ---|---|--- Symantec AntiVirus Corporate Edition | 10.1 MR7 and...

Symantec Endpoint Protection 'Smc.exe'本地拒绝服务漏洞

BUGTRAQ ID: 33753 CNCAN ID：CNCAN-2009021303 Symantec Endpoint Protection是一款赛门铁克企业级防病毒产品。 Symantec Endpoint Protection存在设计错误，本地攻击者可以利用漏洞使应用程序崩溃。 提交"smc.exe -p "命令，无需管理员特权可导致smcgui.exe崩溃 Symantec Endpoint Protection 11.0.4000 Symantec Endpoint Protection 11.0 厂商解决方案 目前没有解决方案提供：...