CVE-2019-9703

CVE-2019-9703 (and CVE-2019-9702) affect Symantec Endpoint Encryption (SEE) prior to version 11.3.0, introducing local privilege-escalation weaknesses. An authenticated, local attacker could gain elevated access to the system by exploiting these vulnerabilities. Symantec released SEE 11.3.0 to ad...

CVE-2019-9702

Symantec Endpoint Encryption, prior to SEE 11.3.0, may be susceptible to a privilege escalation vulnerability, which is a type of issue that allows a user to gain elevated access to resources that are normally protected at lower access levels...

CVE-2019-9702

Symantec Endpoint Encryption (SEE) prior to version 11.3.0 is affected by privilege-escalation vulnerabilities identified as CVE-2019-9702 and CVE-2019-9703 (as documented in related advisories). The issues allow a local attacker to gain elevated privileges. A fix is available: upgrade to SEE 11....

Symantec Messaging Gateway Privilege Escalation

SUMMARY Symantec has released an update to address an issue that was discovered in the Symantec Messaging Gateway SMG product. AFFECTED PRODUCTS Symantec Messaging Gateway SMG --- CVE | Affected Versions | Remediation CVE-2019-12751 | Prior to 10.7.1 | Upgrade to 10.7.1 ISSUES CVE-2019-12751 ---...

Iran-linked APT33 Shakes Up Cyberespionage Tactics

Following a recent report detailing APT33’s infrastructure and tactics, the Iranian state-sponsored threat actor shook up its cyberespionage efforts by adopting new tools and reassigning key domain infrastructure. The infrastructure overhaul stems from a March 2019 Symantec report exposing the...

Symantec Endpoint Encryption Privilege Escalation

SUMMARY Symantec has released an update to address issues that were discovered in the Symantec Endpoint Encryption and Symantec Encryption Desktop products. AFFECTED PRODUCTS Symantec Endpoint Encryption SEE --- CVE | Affected Versions | Remediation CVE-2019-9702 CVE-2019-9703 | Prior to SEE 11.3...

DLP Cross Site Scripting

SUMMARY Symantec has released updates to address an issue that was discovered in the DLP product. AFFECTED PRODUCTS Product family | Affected Versions | Remediation ---|---|--- Data Loss Prevention | 14.x | Upgrade to 15.5 and follow remediation actions mentioned below. Customers who are unable t...

Symantec Content Analysis < 2.3.5.1 affected by Multiple Vulnerabilities (SYMSA1419)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.5.1. It is, therefore, affected by multiple vulnerabilities: - A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76,...

Symantec Content Analysis < 2.3.1.1 affected by Multiple Vulnerabilities (SYMSA1410)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.1.1. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, modmime can read one byte past the end of a buffer when sending a...

Symantec Content Analysis 2.3 < 2.3.1.1 affected by Multiple Vulnerabilities (SYMSA1377)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.1.1. It is, therefore, affected by a vulnerability in the xmlBufAttrSerializeTxtContent function in xmlsave.c in libxml2 allows context-dependent attackers to cause a denial of service out-of-bounds read a...

Web Security Leader Rapidly Expands by Partnering with AWS and Imperva

Companies try to plan and pace their growth. Those plans go out the window when a merger or acquisition happens, as it did to DigiCert Inc. DigiCert, based in Lehi, Utah, had long been a leading Certificate Authority CA, providing electronic documents that verify and authenticate the identities o...

Symantec Content Analysis < 2.3.5.1 affected by Multiple Vulnerabilities (SYMSA1451)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.5.1. It is, therefore, affected by multiple vulnerabilities: - Buffer overflow in the decodearr function in ntpq in ntp 4.2.8p6 through 4.2.8p10 allows remote attackers to execute arbitrary code by...

Symantec Content Analysis < 2.3.5.1 affected by Multiple Vulnerabilities (SYMSA1463)

The version of Symantec Content Analysis running on the remote host is prior to version 2.3.5.1. It is, therefore, affected by multiple vulnerabilities: - An improper handing of overflow in the UTF-8 decoder with supplementary characters can lead to an infinite loop in the decoder causing a Denia...

Symantec Endpoint Encryption < 11.2.1 MP1 (SYMSA1478)

The version of the Symantec Endpoint Encryption SEE installed on the remote Windows host is prior to 11.2.1 MP1. It is, therefore, affected by a privilege escalation vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid125372; scriptversion"1.3";...

Symantec Messaging Gateway 10.x < 10.7.0 Information Disclosure Vulnerability (SYMSA1482)

According to its self-reported version number, the Symantec Messaging Gateway SMG running on the remote host is 10.x prior to 10.7.0. It is, therefore, affected by information disclosure vulnerability as described in the vendor advisory. Note that Nessus has not tested for these issues but has...

IT threat evolution Q1 2019

Targeted attacks and malware campaigns Go Zebrocy Zebrocy was first observed being used as a Sofacy backdoor in 2015. However, the collection of cases where this tool has been used mean that we consider it a subset of activity in its own right. On the basis of this threat actor's past behaviour, ...

Symantec (Blue Coat) Reporter Denial of Service vulnerability (SYMSA1280)

According to its self-reported version number, the Symantec formerly Blue Coat Reporter installation running on the remote host is prior to 10.3.1.1. It is, therefore, is affected by a denial of service vulnerability. The SSL/TLS implementation on the remote host allows clients to renegotiate...

Symantec Content Analysis Web Detection

The web interface for Symantec Content Analysis, formerly Blue Coat Content Analysis, was detected on the remote host. This detection covers v2.3 and up. Binary data symanteccontentanalysiswebdetect.nbin...

Symantec Content Analysis Local Detection

Version information for Symantec Content Analysis, formerly Blue Coat Content Analysis, was retrieved from the remote host. Binary data symanteccontentanalysislocaldetect.nbin...

Trend Micro is one of the anti-virus firms hacked by Fxsmsp

By Ryan De Souza Other two companies allegedly involved in the data breach are Symantec and McAfee. Recently Hackread.com informed you about a Russian group of hackers dubbed Fxsmsp that is specifically targeting trusted anti-virus companies and has attacked the servers of three mainstream firms...