CVE-2017-6330

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...

CVE-2017-6330

Symantec Encryption Desktop before SED 10.4.1MP2 can allow remote attackers to cause a denial of service resource consumption via crafted web requests."...

CVE-2017-6330

CVE-2017-6330 affects Symantec Encryption Desktop (SED) prior to version 10.4.1 MP2. The DoS vulnerability allows remote attackers to cause resource consumption to the affected system by sending crafted web requests. The issue is documented across multiple sources in the connected documents, all ...

Symantec Encryption Desktop Denial of Service Vulnerability

Symantec Encryption Desktop SED is a multi-layer storage encryption solution from Symantec USA. The solution encrypts stored data as well as entire hard disks or hard disk partitions. A security vulnerability exists in versions of SED prior to 10.4.1MP2. A remote attacker could exploit this...

Symantec Encryption Desktop 10.x < 10.4.1 MP2 DoS

The version of Symantec Encryption Desktop installed on the remote host is version 10.x prior to 10.4.1 MP2. It is, therefore, affected by a denial of service vulnerability. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid103195; scriptversion"1.8"; scriptcvsdate"Date...

Hackers Have Reportedly Infiltrated The US Power Grids

By Waqas The IT Security firm Symantec revealed on Wednesday that hackers This is a post from HackRead.com Read the original post: Hackers Have Reportedly Infiltrated The US Power Grids...

Symantec Encryption Desktop DoS

SUMMARY Symantec has released an update to address an issue in the Symantec Encryption Desktop product. AFFECTED PRODUCTS Symantec Encryption Desktop SED --- CVE | Affected Versions | Remediation CVE-2017-6330 | Prior to 10.4.1MP2 | Upgrade to 10.4.1MP2 ISSUES CVE-2017-6330 --- Severity/CVSSv3: |...

Dragonfly 2.0: Hacking Group Infiltrated European and US Power Facilities

The notorious hacking group that has been in operation since at least 2011 has re-emerged and is still interested in targeting the United States and European companies in the energy sector. Yes, I am talking about the 'Dragonfly,' a well-resourced, Eastern European hacking group responsible for...

Symantec Messaging Gateway < 10.6.3-267 - Cross-Site Request Forgery Vulnerability

Exploit for multiple platform in category web applications Exploit Title: CSRF Date: August 9, 2017 Software Link: https://www.symantec.com/products/messaging-gateway Exploit Author: Dhiraj Mishra Contact: http://twitter.com/mishradhiraj Website: http://datarift.blogspot.in/ CVE: CVE-2017-6328...

Symantec Messaging Gateway performRestore Command Injection (CVE-2017-6327)

A command injection vulnerability exists in Symantec Messaging Gateway. The cause of the vulnerability due to combination of an authentication bypass in LoginAction and a lack of sanitization on user input...

Symantec ProxyClient Elevation of Privilege Vulnerability

Symantec ProxyClient Symantec USA Symantec a device that can act as a secure Web gateway or provide optimized WAN traffic. An elevation of privilege vulnerability exists in Symantec ProxyClient version 3.4, which can be exploited by an attacker to obtain elevation of privilege and execute arbitra...

CVE-2017-13674

Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges...

Privilege escalation

Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges...

CVE-2017-13674

Symantec ProxyClient 3.4 for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges...

CVE-2017-13674

CVE-2017-13674 affects Symantec ProxyClient 3.4 for Windows. A local attacker can escalate privileges to LocalSystem and execute arbitrary code, as described in multiple sources. The issue is a local privilege-escalation vulnerability in ProxyClient 3.4 for Windows, with impact described as privi...

Symantec Messaging Gateway RestoreAction.performRestore() RCE

Remote command execution vulnerability in Symantec Messaging Gateway RestoreAction.performRestore localBackupFileSelection parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

SA152: Privilege Escalation Vulnerability in ProxyClient

SUMMARY The ProxyClient application for Windows is susceptible to a privilege escalation vulnerability. A malicious local Windows user can, under certain circumstances, exploit this vulnerability to escalate their privileges on the system and execute arbitrary code with LocalSystem privileges...

Symantec VIP Access for Desktop DLL Load Native Code Execution Vulnerability

Symantec VIP Access for Desktop is a suite of online account security protection software from Symantec Symantec. A security vulnerability exists in versions of Symantec VIP Access for Desktop prior to 2.2.4. An attacker could exploit the vulnerability to run an external executable file...

Symantec VIP Access Desktop Detection (Windows SMB Login)

Detects the installed version of Symantec VIP Access Desktop. The script logs in via smb, searches for SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Code injection

Symantec VIP Access for Desktop prior to 2.2.4 can be susceptible to a DLL Pre-Loading vulnerability. These types of issues occur when an application looks to call a DLL for execution and an attacker provides a malicious DLL to use instead. Depending on how the application is configured, the...