buy.symantec.com XSS vulnerability

Vulnerable URL: http://buy.symantec.com/estore/clp/productdetails/pk/drive-encryption?inid="-confirm0PENBUG0UNTY-" Details: Description| Value ---|--- Patched:| Yes, at 25.10.2017 Latest check for patch:| 25.10.2017 06:40 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alex...

SA133 : Sweet32 Birthday Attack against DES, 3DES, and Blowfish

SUMMARY Symantec Network ProtectionSy products that use the DES, 3DES, and Blowfish symmetric encryption ciphers in long-lived encrypted SSL/TLS, SSH, or VPN connections are susceptible to the Sweet32 birthday attack. A remote attacker with the ability to observe a long-lived encrypted connection...

Symantec Endpoint Protection Client < 22.8.0.50 Elevation of Privilege (SYM16-021)

The version of Symantec Endpoint Protection SEP Client installed on the remote Windows host is prior to 22.8.0.50. It is, therefore, affected by an elevation of privilege vulnerability due to improper path restrictions when loading DLL files. A local attacker can exploit this, by placing a...

Symantec Endpoint Protection Small Business Edition Unsupported Version Detection

According to its self-reported version, the installation of Symantec Endpoint Protection SEP on the remote host is no longer supported. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it is likely to contain security vulnerabilitie...

Symantec VIP Access Desktop Local Code Execution Vulnerability

Symantec VIP Access Desktop is a set of online account security protection software from Symantec Symantec. A local code execution vulnerability exists in Symantec VIP Access Desktop versions prior to 2.2.3, which arises from the program failing to filter user-submitted input. A local attacker...

Symantec VIP Access Arbitrary DLL Execution

Credits: John Page aka hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SYMANTEC-VIP-ACCESS-ARBITRARY-DLL-EXECUTION.txt + ISR: ApparitionSec Vendor: ================ www.symantec.com Product: =================== Symantec VIP Access Desktop...

Symantec VIP Access Desktop Arbitrary DLL Execution

SUMMARY Symantec has released an update to address a finding in VIP Access Desktop that could allow a local user to force VIP Access Desktop UI Manager to execute an arbitrary formatted DLL with logged-on user privileges. AFFECTED PRODUCTS Symantec VIP Access Desktop --- CVE | Affected Versions |...

Symantec NetBackup Security Bypass Vulnerability

Symantec NetBackup is the United States Symantec Symantec company a set of data backup and recovery software suite designed for business users. A security vulnerability exists in the NetApp plug-in in versions prior to Symantec NetBackup 2.0.1 due to the program's use of non-unique server...

CVE-2016-7171

NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation...

Information disclosure

NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation...

CVE-2016-7171

NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation...

CVE-2016-7171

NetApp Plug-in for Symantec NetBackup prior to version 2.0.1 makes use of a non-unique server certificate, making it vulnerable to impersonation...

CVE-2016-7171

CVE-2016-7171 affects the NetApp Plug-in for Symantec NetBackup prior to version 2.0.1. The root cause is the use of a non-unique server certificate, which can allow an attacker to impersonate the service. The vulnerability is documented across multiple sources (including NVD and CNVD/CVE listing...

Symantec Norton App Lock Local Security Bypass Vulnerability

Norton App Lock is a series of security products under Symantec. A local security bypass vulnerability exists in Symantec Norton App Lock. A local attacker could use this issue to bypass certain security restrictions in order to perform unauthorized operations. This could facilitate further attac...

Symantec Web Gateway 5.2.2 RCE

Remote command execution vulnerability in Symantec Web Gateway newwhitelist.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Local Elevation of Privilege Vulnerability in Multiple Symantec Products

Symantec Norton Security with Backup, etc. are all security series software from Symantec USA. A local elevation of privilege vulnerability exists in multiple Symantec products. A local attacker could exploit this vulnerability to execute arbitrary code with SYSTEM privileges...

Symantec Releases Security Updates

Symantec has released security updates to address a vulnerability in Norton and Symantec enterprise products. Exploitation of this vulnerability may allow an attacker to take control of an affected system. Users and administrators are encouraged to review Symantec Security Advisory SYM16-021 and...

Multiple Symantec Products DLL Load Local Elevation of Privilege Vulnerability

Symantec IT Management Suite is a suite for reducing the cost and complexity of enterprise IT asset management. the Symantec Ghost Solution Suite addresses cross-platform disk imaging and deployment needs. A DLL load local elevation of privilege vulnerability exists in multiple Symantec products....

DLL Loading Issue in Symantec Enterprise Products

SUMMARY Symantec has released updates to address a DLL loading issue in Symantec IT Management Suite ITMS, Symantec Ghost Solution Suite GSS, Symantec Encryption Desktop SED, and Symantec Endpoint Virtualization SEV. AFFECTED PRODUCTS Symantec IT Management Suite 8.0 --- CVE | Affected Versions |...

Symantec Releases Security Updates

Symantec has released security updates to address a vulnerability in multiple products. Exploitation of this vulnerability may allow an attacker to take control of an affected system. US-CERT encourages users and administrators to review Symantec Security Advisory SYM16-020 and apply the necessar...