CVE-2018-12242

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network...

Authentication flaw

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network...

Xxe

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity XXE exploit, which is a type of issue where XML input containing a reference to an external entity is processed by a weakly configured XML parser. The attack uses file URI schemes or relative paths ...

CVE-2018-12243

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to a XML external entity XXE exploit, which is a type of issue where XML input containing a reference to an external entity is processed by a weakly configured XML parser. The attack uses file URI schemes or relative paths ...

CVE-2018-12242

The Symantec Messaging Gateway product prior to 10.6.6 may be susceptible to an authentication bypass exploit, which is a type of issue that can allow attackers to potentially circumvent security mechanisms currently in place and gain access to the system or network...

CVE-2018-12243

Symantec Messaging Gateway (SMG) versions prior to 10.6.6 are vulnerable to an XML external entity (XXE) flaw (CVE-2018-12243). The issue arises from a weakly configured XML parser that can process XML input containing external entity references, enabling access to files via file:// URIs or relat...

CVE-2018-12242

CVE-2018-12242 affects Symantec Messaging Gateway prior to version 10.6.6, enabling an authentication bypass that could let an attacker circumvent security controls and gain access to the system or network. Public sources in the provided documents corroborate an authentication bypass for SMG befo...

Symantec Messaging Gateway Multiple Issues

SUMMARY Symantec has released an update to address issues that were discovered in the Symantec Messaging Gateway product. AFFECTED PRODUCTS Symantec Messaging Gateway --- CVE | Affected Versions | Remediation CVE-2018-12242 CVE-2018-12243 | Prior to 10.6.6 | Upgrade to 10.6.6 ISSUES CVE-2018-1224...

Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service (PoC)

Exploit Title: Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-09-02 Vendor Homepage: https://www.symantec.com/ Software Link: https://itunes.apple.com/mx/app/symantec-mobile-encryption/id450235714?mt=8 Tested Version:...

Symantec Mobile Encryption for iPhone 2.1.0 - Server Denial of Service (PoC)

Symantec Mobile Encryption for iPhone 2.1.0 - Server Denial of Service PoC Exploit Title: Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-09-02 Vendor Homepage: https://www.symantec.com/ Software Link:...

Symantec Mobile Encryption for iPhone 2.1.0 - Server Denial of Service Exploit

Exploit for iOS platform in category dos / poc Exploit Title: Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service PoC Discovery by: Luis Martinez Vendor Homepage: https://www.symantec.com/ Software Link:...

Symantec Mobile Encryption For iPhone 2.1.0 Denial Of Service

Exploit Title: Symantec Mobile Encryption for iPhone 2.1.0 - 'Server' Denial of Service PoC Discovery by: Luis Martinez Discovery Date: 2018-09-02 Vendor Homepage: https://www.symantec.com/ Software Link: https://itunes.apple.com/mx/app/symantec-mobile-encryption/id450235714?mt=8 Tested Version:...

Symantec Encryption Management Server < 3.4.2 MP1 Denial of Service Vulnerability (SYMSA1458)

The version of Symantec Encryption Management Server running on the remote host is prior to version 3.4.2 MP1. It is, therefore, affected by an unspecified denial of service vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Symantec Encryption Management Server Denial of Service Vulnerability

Symantec Encryption Management Server formerly known as Symantec PGP Universal Server, SEMS is a suite of encryption management servers from the U.S.-based Symantec Symantec. The server provides key management, monitoring data status, single sign-on and other functions. A denial of service...

Design/Logic Flaw

The Symantec Encryption Management Server SEMS product, prior to version 3.4.2 MP1, may be susceptible to a denial of service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by...

CVE-2018-5243

The Symantec Encryption Management Server SEMS product, prior to version 3.4.2 MP1, may be susceptible to a denial of service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by...

CVE-2018-5243

The Symantec Encryption Management Server SEMS product, prior to version 3.4.2 MP1, may be susceptible to a denial of service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by...

CVE-2018-5243

The Symantec Encryption Management Server SEMS product, prior to version 3.4.2 MP1, may be susceptible to a denial of service DoS exploit. A DoS attack is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by...

CVE-2018-5243

CVE-2018-5243 affects the Symantec Encryption Management Server (SEMS) prior to version 3.4.2 MP1 . The issue is described as a denial-of-service vulnerability; the exact root cause is not detailed in the provided documents. Impact is listed as DoS with partial to high availability impact dependi...

Symantec Encryption Management Server - Denial of Service

SUMMARY Symantec has released an update to address an issue in the Symantec Encryption Management Server product. AFFECTED PRODUCTS Symantec Encryption Management Server SEMS --- CVE | Affected Versions | Remediation CVE-2018-5243 | Prior to 3.4.2 MP1 | Upgrade to 3.4.2 MP1 ISSUES CVE-2018-5243 -...