CVE-2015-8150

Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 is affected by CVE-2015-8150, a local-privilege-elevation flaw. According to the sources, a local attacker can gain root access by modifying a batch file that normally runs with root privileges. The issue is part of multiple vulnerabi...

CVE-2015-8150

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file...

CVE-2015-8148: Exposure of Sensitive Information to an Unauthorized Actor

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request...

CVE-2015-8151: Improper Neutralization of Special Elements used in an OS Command

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

PT-2016-3859

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue concerns the LDAP service, which can be exploited by remote attackers to cause a denial of service. This is achieved through crafted requests that lead ...

CVE-2015-8149: Improper Restriction of Operations within the Bounds of a Memory Buffer

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

PT-2016-3860

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows local users to obtain root access by modifying a batch file. Recommendations For Symantec Encryption Management Server SEMS version 3.3.2, apply...

CVE-2015-8150: Undefined Security Weakness

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file...

PT-2016-3861

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access. Recommendations For Symantec Encryption...

PT-2016-3858

Name of the Vulnerable Software and Affected Versions Symantec Encryption Management Server SEMS version 3.3.2 before MP12 Description The issue allows remote attackers to obtain sensitive information about administrator accounts via a modified request to the LDAP service. Recommendations For...

Symantec Encryption Management Server Local Command Injection Vulnerability

Symantec Encryption Management Server is prone to a local command-injection vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Symantec Encryption Management Server < 3.3.2 MP7 Multiple Vulnerabilities

The version of Symantec Encryption Management Server listening on the remote host is prior to version 3.3.2 MP7. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the handling of specially formatted PGP keys to the integrated key management server. This allows a remote...

Design/Logic Flaw

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action...

CVE-2014-7288

Symantec Encryption Management Server (and PGP Universal Server) prior to 3.3.2 MP7 is affected by CVE-2014-7288. The issue allows an authenticated administrator to execute arbitrary shell commands via a crafted database-backup restore command. OpenVAS identifies it as a local command-injection v...

CVE-2014-7287

CVE-2014-7287 affects Symantec Encryption Management Server (aka Symantec PGP Universal Server) before 3.3.2 MP7. The root cause is in the key-management component, where specially formatted PGP key UIDs in inbound mail can trigger unintended content in outbound emails (e.g., manipulated Subject/...

Symantec Encryption Management Server < 3.2.0 MP6 - Remote Command Injection Exploit

Symantec Encryption Management Server versions prior to 3.2.0 MP6 suffers from a remote command injection vulnerability. Title: Symantec Encryption Management Server - Remote Command Injection Vendor: Symantec Affected Product: Symantec Encryption Gateway Affected Versions: 3.2.0 MP6 Product...

CVE-2014-7288: Undefined Security Weakness

Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action...

PT-2015-3922

Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server and Encryption Management Server versions prior to 3.3.2 MP7 Description The issue allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail...

CVE-2014-7287: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The key-management component in Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allows remote attackers to trigger unintended content in outbound e-mail messages via a crafted key UID value in an inbound e-mail message, as demonstrated by the outbound Subject heade...

Symantec Encryption Management Server Local Command Injection Vulnerability

Symantec Encryption Management Server is a single console for managing multiple encryption applications in the PGP platform. A command injection vulnerability exists in Symantec Encryption Management Server's handling of database backup recovery, which could be exploited by a remote attacker to...