Symantec Encryption Server Detection (LDAP)

LDAP based detection of Symantec Encryption Server. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Symantec Encryption Management Server 3.3.2 < 3.3.2 MP12 Multiple Vulnerabilities (SYM16-002)

The version of Symantec Encryption Management Server running on the remote host is 3.3.2 prior to version 3.3.2 MP12. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw in the LDAP service allows a remote attacker, via a crafted LDAP request, to gather sensitive...

Symantec Encryption Management Server Server Multiple Security Issues

The management console for Symantec Encryption Management Server SEMS is susceptible to potential OS command execution, local access elevation of privilege, a heap-based memory corruption resulting in a service crash and potential information disclosure of management console logon/account...

Symantec Encryption Management Server (SEMS) OS Remote Command Execution Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12. An authenticated remote user with console administrator access can execute arbitrary ...

Symantec Encryption Management Server (SEMS) Remote Information Disclosure Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12 in the LDAP service. A remote user can exploit this vulnerability to obtain...

Symantec Encryption Management Server (SEMS) Remote Denial of Service Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12 in the LDAP service. A remote attacker could cause a denial of service heap memory...

Symantec Encryption Management Server (SEMS) Local Elevation of Privilege Vulnerability

Symantec Encryption Management Server manages and automates security policies for encryption solutions. A security vulnerability exists in Symantec Encryption Management Server SEMS versions prior to 3.3.2 MP12. This vulnerability allows a local attacker to gain root access by modifying a batch...

CVE-2015-8151

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

CVE-2015-8148

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request...

Design/Logic Flaw

Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leveraging console administrator access...

Memory corruption

The LDAP service in Symantec Encryption Management Server SEMS 3.3.2 before MP12 allows remote attackers to cause a denial of service heap memory corruption and service outage via crafted requests...

Symantec Encryption Gateway Remote Command Injection

!/usr/bin/perl -w use LWP::UserAgent; Vantage Point Security Advisory 2014-007 Title: Symantec Encryption Management Server - Remote Command Injection Exploit CVE: CVE-2014-7288 Vendor: Symantec Affected Product: Symantec Encryption Gateway Affected Versions: \n"; printf "\t$0...

Symantec Encryption Management Server < 3.3.2 MP7 Multiple Vulnerabilities

The version of Symantec Encryption Management Server listening on the remote host is prior to version 3.3.2 MP7. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the handling of specially formatted PGP keys to the integrated key management server. This allows a remote...

Symantec Encryption Management Server Remote Command Injection

Vantage Point Security Advisory 2014-007 ======================================== Title: Symantec Encryption Management Server - Remote Command Injection ID: VP-2014-007 Vendor: Symantec Affected Product: Symantec Encryption Gateway Affected Versions: 3.2.0 MP6 Product Website:...

Symantec Encryption Management Server Local Command Injection Vulnerability

Symantec Encryption Management Server is a single console for managing multiple encryption applications in the PGP platform. A command injection vulnerability exists in Symantec Encryption Management Server's handling of database backup recovery, which could be exploited by a remote attacker to...

Symantec Encryption Management Server Database Backup Command Line Injection and Email Header Inject

SUMMARY Symantec Encryption Management Server is susceptible to a shell command line injection when an authorized, but less privileged administrator, is submitting a request for a database backup. This could potentially result in the malicious administrator gaining privileged access on the server...

Symantec Encryption Desktop Installed (Windows)

Binary data symantecencryptiondesktopinstalled.nbin...

Symantec Encryption Desktop Installed (MacOS X)

Binary data macosxsymantecencryptiondesktopinstalled.nbin...

Symantec Encryption Desktop 10.x < 10.3.2 MP3 DoS

The version of Symantec Encryption Desktop installed on the remote Mac OS X host is version 10.x prior to 10.3.2 MP3. It is, therefore, affected by a denial of service vulnerability. The flaw is due to a failure to properly limit decompressed file size during the decryption process of a specially...

Symantec Encryption Desktop 10.x < 10.3.2 MP3 DoS

The version of Symantec Encryption Desktop installed on the remote host is version 10.x prior to 10.3.2 MP3. It is, therefore, affected by a denial of service vulnerability. The flaw is due to a failure to properly limit decompressed file size during the decryption process of a specially crafted...