CVE-2010-0114

The CVE concerns Symantec Endpoint Protection Manager’s Reporting Module (fw_charts.php) where an attacker could overwrite PHP scripts and execute arbitrary code. Concrete details across sources: vulnerability exists in SEP 11.x prior to 11 RU6 MP2; the flaw is in the report-generation component ...

CVE-2010-0114

fwcharts.php in the reporting module in the Manager aka SEPM component in Symantec Endpoint Protection SEP 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request...

Symantec Endpoint Protection File Overwrite

SUMMARY Symantec Endpoint Protection SEP Manager reporting module allows a php file overwrite from an authorized client that could potentially allow execution of arbitrary code on the server-side. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec Endpoint Protection | 11.x |...