SEPM-EoP

概要 製品名 : Symantec Endpoint Protection Manager Version 14 14 MP1 .2 build 1023 14.2.1023.0100 - 旧バージョンも影響を受ける可能性があります 影響度 : 高 。標準的なWindowsユーザー（管理者ではない）が NT SERVICE\semwebsrv に権限昇格できます。このユーザーロールでは、SEPMの多くのコンポーネントにアクセスでき、jsp、php、おそらくjarファイルを改ざんできます。SEPMの完全な乗っ取りも可能と思われます。さらに、SYSTEMへの権限昇格も可能です。 脆弱性タイプ...

WatchGuard FireWare OS epm connect Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WatchGuard FireWare OS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Endpoint Protection Manager service. The issue results from the lac...

EUVD-2020-26983

Malware in sbrugna...

EUVD-2011-0568

Malware in sbrugna...

EUVD-2015-8042

Malware in sbrugna...

Symantec Endpoint Protection Manager < 14.3 RU2 Session Token Exposure (SYMSA18255)

The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 14.3 RU2. It is therefore affected by a vulnerability. HTTPS GET parameters may include session tokens, which could be logged. Note that Nessus has not tested for this issue but has instead relied on...

Symantec Endpoint Protection 安全漏洞

Symantec Endpoint Protection SEP is a suite of antivirus software from Symantec, USA. The software provides security protection across physical and virtual systems. A security vulnerability exists in Symantec Endpoint Protection Manager that allows a local user to perform a denial of service...

Symantec Endpoint Protection Manager Path Traversal Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. A path traversal vulnerability exists in Symantec SEPM versions prior to 14.3. A remote...

Symantec Endpoint Protection Manager Buffer Overflow Vulnerability

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. A buffer overflow vulnerability exists in Symantec SEPM versions prior to 14.3. The...

CVE-2020-5835

Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...

CVE-2020-5834

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

CVE-2020-5835

Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...

CVE-2020-5834

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

Directory traversal

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

CVE-2020-5835

Symantec Endpoint Protection Manager, prior to 14.3, has a race condition in client remote deployment which may result in an elevation of privilege on the remote machine...

CVE-2020-5834

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory...

CVE-2020-5833

Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to an out of bounds vulnerability, which is a type of issue that results in an existing application reading memory outside of the bounds of the memory that had been allocated to the program...

CVE-2020-5834

Summary: CVE-2020-5834 affects Symantec Endpoint Protection Manager (SEPM) prior to v14.3. A directory traversal vulnerability could allow a remote attacker to determine the size of files in a directory. Root cause / affected components: Directory traversal flaw in SEPM before 14.3 (as per multip...

CVE-2020-5833

CVE-2020-5833 affects Symantec Endpoint Protection Manager (SEPM) prior to version 14.3. The issue is described as an out-of-bounds read vulnerability in SEPM that could disclose memory contents. The connected sources (NVD entry, Red Hat advisory, Nessus plugin SYMSA1762 summary) consistently ref...

PT-2020-18744

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions prior to 14.3 Description The issue is related to a race condition in the client remote deployment feature, which could potentially lead to an elevation of privilege on the remote machine...