5333 matches found
CVE-2016-2202
The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...
Design/Logic Flaw
The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...
CVE-2016-2202
The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...
CVE-2016-2202
The CVE-2016-2202 issue affects Symantec ITMS (Inventory Solution component in the Management Agent on the client). The vulnerability allows a local user to bypass the inventory’s application-denial/blacklist functionality, effectively bypassing policy to run unauthorized applications. The root c...
Symantec Messaging Gateway Elevation of Privilege Vulnerability
Symantec Messaging Gateway is a suite of anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec. A security vulnerability exists in the management console of Symantec Messaging Gateway versions prior to 10.6.0-7. The vulnerability can be exploited...
Symantec Releases Security Updates
Symantec has released security updates to address vulnerabilities in its Messaging Gateway SMG Appliance software. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages users and administrators to review Symantec...
Symantec Messaging Gateway Stored AD Password Vulnerability
Symantec Messaging Gateway is a suite of anti-spam, anti-virus, advanced content filtering and data leakage protection technologies from Symantec. A security vulnerability exists in the management console of Symantec Messaging Gateway versions prior to 10.6.0-7. An attacker could exploit the...
Symantec Messaging Gateway Multiple Security Issues
SUMMARY Symantec Messaging Gateway SMG Appliance management console was susceptible to potential recovery of the AD password by any user with at least authorized read access to the appliance. Also, an admin or support user could potentially escalate a lower-privileged access to root on the...
Symantec IT Management Suite Security Bypass Vulnerability
Symantec IT Management Suite is a suite designed to reduce the cost and complexity of enterprise IT asset management. Symantec IT Management Suite failed to properly handle blacklisted applications, allowing a local attacker to exploit the vulnerability to bypass security restrictions and run...
Symantec ITMS Inventory Solution Application Denial Functionality Bypass
SUMMARY The Inventory Solution component of Symantecs IT Management Agent, the client portion of Symantec IT Management Suite ITMS powered by Altiris, can be configured to deny one or more applications from running on a windows managed client as part of IT management functions. A determined user...
Symantec Endpoint Protection Multiple Vulnerabilities (Mar 2016)
Symantec Endpoint Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Endpoint Protection Client < 12.1 RU6 MP4 SysPlant.sys Driver RCE (SYM16-003)
The version of Symantec Endpoint Protection Client running on the remote host is 12.1 prior to 12.1 RU6 MP4. It is, therefore, affected by a remote code execution vulnerability due to insecure permissions for the SysPlant.sys driver. A remote attacker can exploit this, via a crafted HTML document...
Symantec Endpoint Protection Manager < 12.1 RU6 MP4 Multiple Vulnerabilities (SYM16-003)
The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 12.1 RU6 MP4. It is, therefore, affected by the following vulnerabilities : - A cross-site request forgery XSRF vulnerability exists due to HTTP requests to logging scripts not requiring multiple...
knowledge.symantec.com XSS vulnerability
Vulnerable URL: https://knowledge.symantec.com/support/ssl-certificates-support/index.html?ichbox=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 08.04.2016 Latest check for patch:| 08.04.2016 05:16 GMT Vulnerability type:| XSS Vulnerability...
Symantec Endpoint Protection Manager and Client SQL Injection Vulnerability
Symantec Endpoint Protection is a suite of antivirus software from Symantec Corporation in the U.S. SEP Manager and Client are the management and client software. A SQL injection vulnerability exists in Symantec Endpoint Protection Manager and Client, which allows remote attackers to exploit the...
Symantec Endpoint Protection Manager and Client Cross-Site Scripting Vulnerability
Symantec Endpoint Protection is a suite of antivirus software from Symantec Corporation in the U.S. SEP Manager and Client are the management and client software. A cross-site scripting vulnerability exists in Symantec Endpoint Protection Manager and Client, which allows remote attackers to explo...
Symantec Domain-Validation Certificate Incorrect Character Handling Vulnerability
Symantec Domain-Validation Certificates are a set of certificates that provide encryption and authentication capabilities over SSL/TLS. Symantec DV Certificates do not properly handle specific characters in email addresses, allowing remote attackers to obtain legitimate DV SSL/TLS certificates wi...
Symantec Endpoint Protection Manager and Client Arbitrary Code Execution Vulnerability
Symantec Endpoint Protection is a suite of antivirus software from Symantec Corporation in the U.S. SEP Manager and Client are the management and client software. Symantec Endpoint Protection Manager and Client Sysplant.sys file for difficult to fully validate external data, allowing remote...
CVE-2015-8154
The SysPlant.sys driver in the Application and Device Control ADC component in the client in Symantec Endpoint Protection SEP 12.1 before RU6-MP4 allows remote attackers to execute arbitrary code via a crafted HTML document, related to "RWX Permissions."...