Symantec Endpoint Protection 'sysplant.sys' Denial of Service Vulnerability

Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. A security vulnerability exists in Symantec Endpoint Protection 'sysplant.sys' that allows a local user to send specially formatted calls to trigger a deadlock, whic...

Symantec Endpoint Protection Management Console SQL Injection Vulnerability

Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection management console fails to properly validate user input and administrators with low privileges can perform SQL injection attacks with...

Symantec Endpoint Protection DLL Load Arbitrary Code Execution Vulnerability

Symantec Endpoint Protection is a protection software developed to enhance enterprise virus protection and advanced threat defense. Symantec Endpoint Protection loads DLLs with a security vulnerability that allows an attacker to construct a malicious DLL, place it on a network share or in a speci...

Symantec Data Loss Prevention Enforce Server Administration Console Cross-site Scripting, Cross-site

SUMMARY Symantec's Data Loss Prevention DLP Management Console is potentially susceptible to persistent cross-site scripting XSS issues and a possible cross-site request forgery CSRF in the Enforce Server administration console. Successful exploitation could result in potential unauthorized actio...

This Simple Trick Requires Only Your Phone Number to Hack your Email Account

We all have been receiving spam phone calls and messages on almost daily basis from scammers who want to pilfer your money and personal information, but a new type of social engineering hack that makes use of just your mobile number to trick you is a little scarier. Security firm Symantec is...

Symantec Encryption Management Server Local Command Injection Vulnerability

Symantec Encryption Management Server is prone to a local command-injection vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Symantec Encryption Server Detection

This script consolidate SSH/LDAP based detection of Symantec Encryption Server SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Symantec Encryption Gateway Remote Command Injection

!/usr/bin/perl -w use LWP::UserAgent; Vantage Point Security Advisory 2014-007 Title: Symantec Encryption Management Server - Remote Command Injection Exploit CVE: CVE-2014-7288 Vendor: Symantec Affected Product: Symantec Encryption Gateway Affected Versions: \n"; printf "\t$0...

Norton Internet Security NBNS Response Processing Stack Overflow - Ver2 (CVE-2004-0444)

Norton Internet Security is a security solution produced by Symantec corporation. If the Firewall component allows traffic on port 137/UDP, this traffic will be parsed as NetBIOS Name Service messages. There exists a vulnerability in the Symantec Firewall product line. A specially crafted NetBIOS...

Symantec Web Gateway < 5.2 Multiple Vulnerabilities (SYM14-003)

Binary data 8769.prm...

Threat Outbreak Alert RuleID15158: Email Messages Distributing Malicious Software on May 7, 2015

Medium Alert ID: 38751 First Published: 2015 May 8 13:24 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID15158 may contain the following files: Name | Size ...

Symantec Endpoint Protection Manager Detection

Binary data 8764.prm...

Symantec Web Security Gateway Detection via SSL/TLS

Binary data 8755.prm...

Symantec Workspace Streaming Agent Privilege Escalation Vulnerability

Symantec Workspace Streaming Agent is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Symantec Workspace Streaming Agent Unquoted Service Path Local Privilege Escalation (SYM15-004)

The version of the Symantec Workspace Streaming SWS agent installed on the remote Windows host is affected by a local privilege escalation vulnerability due to an unquoted search path in AppMgrService.exe. A local attacker can exploit this to execute arbitrary code with local system privileges...

Symantec Workspace Streaming (SWS) Agent Detection (Windows SMB Login)

Detects the installed version of Symantec Workspace Streaming Agent. The script logs in via smb, searches for SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...

Code injection

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...

CVE-2015-1484

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...

CVE-2015-1484

Symantec Workspace Streaming Agent is affected by a local privilege escalation due to an unquoted search/path in AppMgrService.exe when installed as a service. A Trojan horse executable placed in the system root can be launched at service startup to gain SYSTEM privileges. Affected versions inclu...

CVE-2015-1484

Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming SWS 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as...