5333 matches found
Symantec Endpoint Encryption Information Disclosure Vulnerability
Symantec Endpoint Encryption i.e. SEE is a suite of software from Symantec that provides advanced encryption and management capabilities for desktops, laptops and removable storage devices. An information disclosure vulnerability exists in versions of Symantec Endpoint Encryption prior to 11.1.0...
CVE-2015-6556
EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption SEE before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump...
Design/Logic Flaw
EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption SEE before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump...
CVE-2015-6556
EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption SEE before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump...
CVE-2015-6556
Symantec Endpoint Encryption (SEE) up to version 11.0 is affected by CVE-2015-6556 due to EACommunicatorSrv.exe in the Framework Service allowing an authenticated remote user to trigger a memory dump and access credentials stored on the client. The issue is documented with a low CVSS v2 base scor...
Symantec Endpoint Protection Manager Java Object Deserialization RCE (SYM15-011)
The remote Symantec Endpoint Protection Manager server is affected by a remote command execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated, remote attacker can exploit this, by sending a crafted...
Symantec Messaging Gateway 10 Exposure of Stored AD Password Vulnerability
This module will grab the AD account saved in Symantec Messaging Gateway and then decipher it using the disclosed Symantec PBE key. Note that authentication is required in order to successfully grab the LDAP credentials, and you need at least a read account. Version 10.6.0-7 and earlier are...
Symantec Releases Security Update
Symantec has released Symantec Endpoint Encryption 11.1.0 to address a vulnerability that may allow an attacker to take control of an affected system. US-CERT encourages users and administrators to review the Security Advisory from Symantec and apply the necessary update. This product is provided...
Symantec Endpoint Encryption Client Memory Dump Information Disclosure
SUMMARY Symantecs Endpoint Encryption SEE Client is susceptible to information disclosure if a user with access to a system hosting a client is able to force a client memory dump and access the content of the memory dump. This could result in unauthorized exposure of such things as stored...
Symantec Endpoint Protection Manager-RU6-MP3任意操作系统命令执行漏洞
No description provided by source...
Symantec Endpoint Protection Manager-RU6-MP3任意Java代码执行漏洞
No description provided by source...
Symantec Endpoint Protection Multiple Vulnerabilities (Nov 2015)
Symantec Endpoint Protection is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Symantec Endpoint Protection Manager < 12.1 RU6 MP3 Multiple Vulnerabilities (SYM15-011)
The version of Symantec Endpoint Protection Manager SEPM installed on the remote host is prior to 12.1 RU6 MP3. It is, therefore, affected by the following vulnerabilities : - A local privilege escalation vulnerability exists due to an untrusted search path flaw. A local attacker can exploit this...
Symantec Endpoint Protection Manager-RU6-MP3 Arbitrary Java Code Execution Vulnerability
Symantec Endpoint Protection Manager is a centralized manager for Symantec's enterprise-class antivirus software. An arbitrary Java code execution vulnerability exists in Symantec Endpoint Protection Manager version 12.1 prior to 12.1-RU6-MP3, which allows remote attackers to execute arbitrary Ja...
Symantec Endpoint Protection-RU6-MP3 Untrusted Search Path Vulnerability
Symantec Endpoint Protection is a new generation of enterprise-class antivirus software developed by Symantec. Symantec Endpoint Protection 12.1-RU6-MP3 A previous version of 12.1 contained an untrusted search path vulnerability that allowed a local user to gain privileges via a Trojan horse DLL...
CVE-2015-8113
Untrusted search path vulnerability in the client in Symantec Endpoint Protection SEP 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492...
CVE-2015-6555
Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the console Java port...
CVE-2015-6554
Symantec Endpoint Protection Manager SEPM 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data...
Design/Logic Flaw
Untrusted search path vulnerability in the client in Symantec Endpoint Protection SEP 12.1 before 12.1-RU6-MP3 allows local users to gain privileges via a Trojan horse DLL in a client install package. NOTE: this vulnerability exists because of an incomplete fix for CVE-2015-1492...