Design/Logic Flaw

Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...

CVE-2018-18364

Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...

CVE-2018-18364

Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...

CVE-2018-18364

CVE-2018-18364 affects Symantec Ghost Solution Suite (GSS) prior to version 3.3 RU1, vulnerable to a DLL hijacking flaw where an attacker could cause execution of unintended code via a malicious DLL loaded by a linked application. The NVD/CVSS data indicate a local exploit path with low privilege...

CVE-2018-18364

Symantec Ghost Solution Suite GSS versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file DLL that the attacker...

Command injection

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges...

CVE-2018-12237

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges...

CVE-2018-12237

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges...

CVE-2018-12237

CVE-2018-12237 affects the Symantec Reporter CLI (Reporter CLI) by an OS command injection vulnerability. Affected: Reporter CLI versions 10.1 before 10.1.5.6 and 10.2 before 10.2.1.8. Root cause: command injection via the CLI that can be exploited by an authenticated administrator with Enable mo...

CVE-2018-12237

The Symantec Reporter CLI 10.1 prior to 10.1.5.6 and 10.2 prior to 10.2.1.8 is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges...

Symantec Ghost Solution Suite DLL Hijack

SUMMARY Symantec has released an update to address an issue that was discovered in the Ghost Solution Suite GSS product. AFFECTED PRODUCTS Ghost Solution Suite GSS --- CVE | Affected Versions | Remediation CVE-2018-18364 | Prior to 3.3 RU1 | Upgrade to 3.3 RU1 ISSUES CVE-2018-18364 ---...

Symantec (Blue Coat) Reporter CLI OS Command Injection Vulnerability (SYMSA1465)

According to its self-reported version number, the Symantec formerly Blue Coat Reporter installation running on the remote host is 10.1 prior to 10.1.5.6 or 10.2 prior to 10.2.1.8. It is, therefore, affected by an OS command injection vulnerability. An authenticated attacker with Enable mode...

Symantec Reporter CLI OS Command Injection Vulnerability

Symantec Reporter CLI is a command line tool from Symantec USA. The tool is primarily used to manage and change network settings. An operating system command injection vulnerability exists in Symantec Reporter CLI, which can be exploited by a remote attacker to execute arbitrary operating system...

OS Command Injection Vulnerability in Reporter CLI

SUMMARY The Symantec Reporter CLI is susceptible to an OS command injection vulnerability. An authenticated malicious administrator with Enable mode access can execute arbitrary OS commands with elevated system privileges. AFFECTED PRODUCTS Reporter --- CVE | Supported Versions | Remediation...

Shamoon Attackers Employ New Tool Kit to Wipe Infected Systems

ARCHIVED STORY Shamoon Attackers Employ New Tool Kit to Wipe Infected Systems By Thomas Roccia · December 19, 2018 Last week the McAfee Advanced Threat Research team posted an analysis of a new wave of Shamoon “wiper” malware attacks that struck several companies in the Middle East and Europe. In...

Symantec Endpoint Protection Client 12.1.x / 14.x < 14.2 MP1 DLL Preloading Vulnerability (SYMSA1468)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x or 14.x prior to 14.2 MP1. It is, therefore, affected by an unspecified DLL preloading vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Symantec Endpoint Protection Client 12.1.x < 12.1.7454.7000 / 14.x < 14.2 Multiple Vulnerabilities (SYMSA1468)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x prior to 12.1.7454.7000 or 14.0.x prior to 14.2. It is, therefore, affected by multiple vulnerabilities: - An unspecified antivirus bypass vulnerability. CVE-2018-12238 - An unspecified antivirus bypass...

Sql injection

Norton prior to 22.15; Symantec Endpoint Protection SEP prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition SEP SBE prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud SEP Cloud prior to 22.15.1 may be susceptible to an AV bypass...

CVE-2018-12238

Norton prior to 22.15; Symantec Endpoint Protection SEP prior to 12.1.7454.7000 & 14.2; Symantec Endpoint Protection Small Business Edition SEP SBE prior to NIS-22.15.1.8 & SEP-12.1.7454.7000; and Symantec Endpoint Protection Cloud SEP Cloud prior to 22.15.1 may be susceptible to an AV bypass...

Code injection

Symantec Endpoint Protection prior to 14.2 MP1 may be susceptible to a DLL Preloading vulnerability, which in this case is an issue that can occur when an application being installed unintentionally loads a DLL provided by a potential attacker. Note that this particular type of exploit only...