CVE-2018-18368

Symantec Endpoint Protection Manager (SEPM) is affected by a local privilege escalation vulnerability (CVE-2018-18368) that exists in SEPM prior to 14.2 RU1. An attacker with local access could gain elevated privileges. Remediation is to upgrade to SEPM/SEP 14.2 RU1 (or RU2 where applicable) and ...

CVE-2018-18368

Symantec Endpoint Protection Manager SEPM, prior to 14.2 RU1, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an...

Symantec Endpoint Protection Multiple Issues

SUMMARY Symantec has released updates to address issues that were discovered in the Symantec Endpoint Protection SEP, Symantec Endpoint Protection Manager SEPM, Symantec Endpoint Protection Small Business Edition SEP SBE and Symantec Mail Security for MS Exchange SMSMSE products. AFFECTED PRODUCT...

Symantec Endpoint Protection Manager LuComServer stDisScriptEngine Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Symantec Endpoint Protection Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Symantec Endpoint Protection Manager CVE-2018-18368 Local Privilege Escalation Vulnerability

Description Symantec Endpoint Protection Manager is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Symantec Endpoint Protection Manager versions prior to 14.2 RU1 are vulnerable. Technologies Affected Symantec Endpoint...

Symantec Endpoint Protection CVE-2019-12756 Local Security Bypass Vulnerability

Description Symantec Endpoint Protection is prone to a local security-bypass vulnerability. Local attackers can exploit this vulnerability to bypass certain security restrictions and gain access to possibly sensitive information. Versions prior to Symantec Endpoint Protection 14 RU2 are vulnerabl...

Multiple Symantec Products CVE-2019-12759 Local Privilege Escalation Vulnerability

Description Multiple Symantec Products are prone to an local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. The following products and versions are affected: Symantec Endpoint Protection Manager SEPM prior to versions 14.2 RU2 Symantec Ma...

Symantec Endpoint Protection CVE-2019-12758 Local Code Execution Vulnerability

Description Symantec Endpoint Protection is prone to a local code-execution vulnerability. A local attacker can leverage this issue to execute arbitrary code in the context of affected application. Failed attempts may lead to denial-of-service conditions. Symantec Endpoint Protection versions pri...

Symantec Endpoint Protection Manager OpenSSL Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Symantec Endpoint Protection Manager. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Symantec Endpoint Protection CVE-2019-18372 Local Privilege Escalation Vulnerability

Description Symantec Endpoint Protection is prone to a local privilege escalation vulnerability. A local attacker can leverage this issue to gain elevated privileges. Symantec Endpoint Protection SEP versions prior to 14.2 RU2 are vulnerable. Technologies Affected Symantec Endpoint Protection 11...

xHelper Malware for Android

xHelper is not interesting because of its infection mechanism; the user has to side-load an app onto his phone. It's not interesting because of its payload; it seems to do nothing more than show unwanted ads. it's interesting because of its persistence: Furthermore, even if users spot the xHelper...

Symantec SONAR < 12.0.2 Security Bypass (SYMSA1494)

The version of Symantec SONAR installed on the remote host is prior to 12.0.2. It is, therefore, affected by a security bypass vulnerability due to a flaw the tamper protection. An authenticated attacker can exploit this, to circumvent tamper protection on the resident system. Note that Nessus ha...

Symantec SONAR Tamper Protection Bypass Vulnerability

Symantec SONAR is the United States Symantec Symantec company's set of computer real-time protection against malicious programs. A tamper protection bypass vulnerability exists in versions of Symantec SONAR prior to 12.0.2, which can be exploited by an attacker to bypass existing tamper protectio...

CVE-2019-12752

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system...

CVE-2019-12752

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system...

Design/Logic Flaw

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system...

CVE-2019-12752

CVE-2019-12752 affects the Symantec SONAR component prior to version 12.0.2, where a tamper-protection bypass could allow an attacker to circumvent resident tamper protections. The issue is documented across multiple sources (Red Hat, NVD, Nessus, and Symantec advisories). Affected product is Sym...

CVE-2019-12752

The Symantec SONAR component, prior to 12.0.2, may be susceptible to a tamper protection bypass vulnerability which could potentially allow an attacker to circumvent the existing tamper protection in use on the resident system...

Symantec Endpoint Protection SONAR Component CVE-2019-12752 Security Bypass Vulnerability

Description Symantec Endpoint Protection is prone to a security-bypass vulnerability. Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions. Symantec Endpoint Protection versions prior to 12.0.2 are vulnerable. Technologi...

Symantec SONAR Security Bypass

SUMMARY Symantec has released an update to address an issue that was discovered in the Symantec SONAR component. AFFECTED PRODUCTS Component: SONAR Engine --- CVE | Affected Versions | Remediation CVE-2019-12752 | Prior to 12.0.2 | Upgrade to 12.0.2 Note: Live updatable; no action required by...