CVE-2016-5312

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...

CVE-2016-5310

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network ATP; Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection SEP for Windows before 12.1.6 MP5; Symantec Endpoint Protection SEP for Mac;...

CVE-2016-5309

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network ATP; Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection SEP for Windows before 12.1.6 MP5; Symantec Endpoint Protection SEP for Mac;...

CVE-2016-5310

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network ATP; Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection SEP for Windows before 12.1.6 MP5; Symantec Endpoint Protection SEP for Mac;...

Memory corruption

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network ATP; Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection SEP for Windows before 12.1.6 MP5; Symantec Endpoint Protection SEP for Mac;...

Directory traversal

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...

CVE-2016-5309

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network ATP; Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection SEP for Windows before 12.1.6 MP5; Symantec Endpoint Protection SEP for Mac;...

Out-of-bounds

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network ATP; Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection SEP for Windows before 12.1.6 MP5; Symantec Endpoint Protection SEP for Mac;...

CVE-2016-5310

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network ATP; Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection SEP for Windows before 12.1.6 MP5; Symantec Endpoint Protection SEP for Mac;...

CVE-2016-5309

CVE-2016-5309 is a DoS in the RAR file parser of Symantec’s decomposer engines across multiple products (ATP/NS/SEPs/SPE/SMG family). The root cause is an out-of-bounds read during RAR decompression, allowing remote attackers to crash affected applications via specially crafted RAR files. A close...

CVE-2016-5312

Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. dot dot in the sn parameter to brightmail/servlet/com.ve.kavachart.servlet.ChartStream...

CVE-2016-5312

A directory traversal in the sn parameter of com.ve.kavachart.servlet.ChartStream affects Symantec Messaging Gateway before 10.6.2, allowing authenticated low-privilege users to read arbitrary server files. A public exploit (Exploit-DB 40437) exists; patch to 10.6.2 per Symantec advisory SYM16-016.

CVE-2016-5309

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network ATP; Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection SEP for Windows before 12.1.6 MP5; Symantec Endpoint Protection SEP for Mac;...

CVE-2016-5310

CVE-2016-5310 covers a denial-of-service memory-corruption issue in the RAR file parser/decompressor across Symantec products (ATP, various SEP variants, SPE, SMSG, SMSDOM, SPSS, SMSMSE, SEPC, SEPC, etc.). The root cause is mishandling of crafted RAR archives in the decompression path, leading to...

SA147 : March 2017 NTP Security Vulnerabilities

SUMMARY Symantec Network Protection products using affected versions of the NTP reference implementation from ntp.org are susceptible to multiple vulnerabilities. A remote attacker can exploit these vulnerabilities to cause denial of service through application crashes. A local attacker can explo...

CVE-2016-5313

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

Design/Logic Flaw

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

CVE-2016-5313

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

CVE-2016-5313

Symantec Web Gateway SWG before 5.2.5 allows remote authenticated users to execute arbitrary OS commands...

CVE-2016-5313

Symantec Web Gateway (SWG) is affected by CVE-2016-5313: before version 5.2.5, the management console contains a flaw in the web interface (notably the /spywall/new_whitelist.php script) that allows remote authenticated users to execute arbitrary OS commands due to improper whitelist validation. ...