CVE-2012-4350

Multiple unquoted Windows search path vulnerabilities in the 1 Manager and 2 Agent components in Symantec Enterprise Security Manager ESM before 11.0 allow local users to gain privileges via unspecified vectors...

Input validation

The management console in Symantec Endpoint Protection SEP 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via...

Path traversal

Multiple unquoted Windows search path vulnerabilities in the 1 Manager and 2 Agent components in Symantec Enterprise Security Manager ESM before 11.0 allow local users to gain privileges via unspecified vectors...

CVE-2012-4350

Multiple unquoted Windows search path vulnerabilities in the 1 Manager and 2 Agent components in Symantec Enterprise Security Manager ESM before 11.0 allow local users to gain privileges via unspecified vectors...

CVE-2012-4350

Symantec Enterprise Security Manager (ESM) for Windows is affected by CVE-2012-4350 due to an unquoted search path in both the Manager and Agent components, enabling local privilege escalation. Public sources (OpenVAS/Nessus entries) confirm the issue affects Windows and provide remediation: upgr...

CVE-2012-4348

The management console in Symantec Endpoint Protection SEP 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via...

CVE-2012-4348

The CVE-2012-4348 entry corresponds to a vulnerability in Symantec Endpoint Protection Manager/Protection Center where PHP scripts do not properly validate external input, enabling remote code execution. Affected products are SEP 11.0 before RU7-MP3, SEP 12.1 before RU2, and SEP Small Business Ed...

Symantec Messaging Gateway Directory Traversal (CVE-2012-4347)

Two directory traversal vulnerabilities exist in Symantec Messaging Gateway...

Symantec Enterprise Security Manager Manager/Agent Local Elevation of Privilege

SUMMARY Symantecs Enterprise Security Manager ESM for Windows has an unquoted search path in the Manager and Agent components. This could allow a non-privileged local user, able to successfully insert arbitrary code in the root path, to potentially execute their code with elevated privileges duri...

CVE-2012-4349

Unquoted Windows search path vulnerability in Symantec Network Access Control SNAC 12.1 before RU2 allows local users to gain privileges via unspecified vectors...

Design/Logic Flaw

Unquoted Windows search path vulnerability in Symantec Network Access Control SNAC 12.1 before RU2 allows local users to gain privileges via unspecified vectors...

CVE-2012-4349

Unquoted Windows search path vulnerability in Symantec Network Access Control SNAC 12.1 before RU2 allows local users to gain privileges via unspecified vectors...

CVE-2012-4349

The CVE-2012-4349 entry concerns a root cause in Symantec Network Access Control (SNAC) 12.1 before RU2, where an unquoted Windows search path could allow a local attacker to execute arbitrary code with elevated privileges. The vulnerability is tied to SNAC’s startup path handling, enabling local...

Symantec Endpoint Protection Management Consoles Multiple Issues

SUMMARY The management console in Symantec Endpoint Protection Manager SEPM and Symantec Protection Center SPC for SEP 12.0 Small Business Edition, contains PHP scripts that do not properly validate external input. This could potentially result in remote code execution. Symantec Network Access...

Symantec Web Gateway 5.0.3.18 RCE

Remote command execution vulnerability in Symantec Web Gateway pbcontrol.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Symantec Messaging Gateway 9.5.3 File Disclosure

File disclosure vulnerability in Symantec Messaging Gateway Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

CVE-2012-4347

Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway SMG 9.5.x allow remote authenticated users to read arbitrary files via a .. dot dot in the 1 logFile parameter in a logs action to brightmail/export or 2 localBackupFileSelection parameter in an...

Directory traversal

Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway SMG 9.5.x allow remote authenticated users to read arbitrary files via a .. dot dot in the 1 logFile parameter in a logs action to brightmail/export or 2 localBackupFileSelection parameter in an...

CVE-2012-4347

Multiple directory traversal vulnerabilities in the management console in Symantec Messaging Gateway SMG 9.5.x allow remote authenticated users to read arbitrary files via a .. dot dot in the 1 logFile parameter in a logs action to brightmail/export or 2 localBackupFileSelection parameter in an...

CVE-2012-4347

Symantec Messaging Gateway (SMG) 9.5.x exposes multiple directory traversal vulnerabilities in its management console. The issues allow remote authenticated users to read arbitrary files by manipulating the logFile parameter (logs action to brightmail/export) or the localBackupFileSelection param...