Symantec Endpoint Encryption Denial of Service Vulnerability (CNVD-2017-36539)

Symantec Endpoint Encryption SEE is a suite of software from Symantec Corporation that provides advanced encryption and management capabilities for desktops, laptops, and removable storage devices. A security vulnerability exists in Symantec Endpoint Encryption in versions prior to SEE 11.1.3MP1...

Null pointer dereference

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerException that can lead to a privilege escalation scenario...

CVE-2017-15525

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service DoS attack, which is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting...

Design/Logic Flaw

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service DoS attack, which is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting...

CVE-2017-15525

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service DoS attack, which is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting...

CVE-2017-15526

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerException that can lead to a privilege escalation scenario...

CVE-2017-15525

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a denial of service DoS attack, which is a type of attack whereby the perpetrator attempts to make a particular machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting...

CVE-2017-15526

Prior to SEE v11.1.3MP1, Symantec Endpoint Encryption can be susceptible to a null pointer de-reference issue, which can result in a NullPointerException that can lead to a privilege escalation scenario...

CVE-2017-15526

Symantec Endpoint Encryption (SEE) Drive Encryption client prior to 11.1.3 MP1 is affected by a null pointer dereference that can lead to privilege escalation and a denial of service. The issue affects SEE Drive Encryption Client on Windows; root cause is a null pointer dereference/backreference ...

CVE-2017-15525

CVE-2017-15525 affects Symantec Endpoint Encryption (SEE) components prior to version 11.1.3 MP1. The connected Nessus entry specifies that the drive-encryption client on Windows installed before 11.1.3 MP1 is vulnerable to a denial-of-service (DoS) condition and a NULL pointer dereference that c...

Symantec Endpoint Encryption Various Issues

SUMMARY Symantec has released an update to address two issues in the Symantec Endpoint Encryption product. AFFECTED PRODUCTS Symantec Endpoint Encryption SEE --- CVE | Affected Versions | Remediation CVE-2017-15525 CVE-2017-15526 | Prior to 11.1.3MP1 | Upgrade to 11.1.3MP1 ISSUES CVE-2017-15525 -...

Symantec Endpoint Protection 12.1.6 Tamper Protection Bypass

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-6331-SYMANTEC-ENDPOINT-PROTECTION-TAMPER-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: ======= www.symantec.com Product: =========== Symantec Endpoint...

Symantec Endpoint Protection v12.1 / Tamper-Protection Bypass Exploit

Exploit for windows platform in category local exploits + Credits: John Page a.k.a hyp3rlinx Vendor: ======= www.symantec.com Product: =========== Symantec Endpoint Protection v12.1.6 12.1 RU6 MP5 Symantec 12.1.7004.6500 Vulnerability Type: =================== Tamper-Protection Bypass Denial Of...

Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass

Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-6331-SYMANTEC-ENDPOINT-PROTECTION-TAMPER-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: ======= www.symantec.com Product: =========== Symantec Endpoint...

Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass

Symantec Endpoint Protection 12.1 - Tamper-Protection Bypass + Credits: John Page a.k.a hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/CVE-2017-6331-SYMANTEC-ENDPOINT-PROTECTION-TAMPER-PROTECTION-BYPASS.txt + ISR: ApparitionSec Vendor: =======...

Symantec Endpoint Protection Client 12.1.x < 12.1 RU6 MP9 / 14.0.x < 14.0 RU1 Multiple Vulnerabilities (SYM17-011)

The version of Symantec Endpoint Protection SEP Client installed on the remote host is 12.1.x prior to 12.1 RU6 MP9 or 14.0.x prior to 14.0 RU1. It is, therefore, affected by a multiple vulnerabilities as referenced in the advisory. Note that Nessus has not tested for this issue but has instead...

Symantec Endpoint Protection Privilege Escalation Vulnerability (SYM17-011)

Symantec Endpoint Protection is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Endpoint Protection Arbitrary File Deletion Vulnerability (SYM17-011)

Symantec Endpoint Protection is prone to arbitrary file deletion vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symantec Endpoint Protection Security Bypass Vulnerability (SYM17-011)

Symantec Endpoint Protection is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SA156: Apache Tomcat Vulnerabilities Apr-Oct 2017

SUMMARY Symantec Network Protection products using affected versions of Apache Tomcat are susceptible to multiple security vulnerabilities. A remote attacker, with access to the management interface, can obtain sensitive information from the server, modify information associated with a different...