Nginx Vulnerabilities Jul 2017 - Oct 2019

Summary Symantec SWG products using affected versions of Nginx may be susceptible to multiple Nginx vulnerabilities. A remote attacker can use crafted requests to obtain sensitive information or cause denial of service. An attacker can also obtain sensitive information or cause denial of service ...

OpenSSH Vulnerabilities Jan-Oct 2019

Summary Symantec SWG products using affected versions of OpenSSH are susceptible to multiple vulnerabilities. A malicious SCP server or SCP man-in-the-middle MITM attacker can modify state on the SCP client host. A local attacker can cause denial of service through OpenSSH application crashes...

Symantec Data Center Security Manager Privilege Escalation

Symantec Data Center Security Manager Component, with versions earlier than 6.8.2 aka 6.8 MP2, are found to be susceptible to a privilege escalation vulnerability, where an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected...

Symantec Web Gateway 5.0.2.8 Remote Code Execution Exploit

Exploit for windows platform in category web applications Title: Postauth RCE in Symantec Web Gateway 5.0.2.8 Vendor: www.symantec.com Vulnerable software: www.symantec.com Repo: https://github.com/c610/free/ POST /spywall/timeConfig.php HTTP/1.1 Host: 192.168.216.133 User-Agent: Mozilla/5.0...

Richkit - Domain Enrichment Toolkit

Richkit is a python3 package that provides tools taking a domain name as input, and returns addtional information on that domain. It can be an analysis of the domain itself, looked up from data-bases, retrieved from other services, or some combination thereof. The purpose of richkit is to provide...

Symantec Web Gateway 5.0.2.8 Remote Code Execution

Title: Postauth RCE in Symantec Web Gateway 5.0.2.8 Date: 27.03.2020 Vendor: www.symantec.com Vulnerable software: www.symantec.com Repo: https://github.com/c610/free/ POST /spywall/timeConfig.php HTTP/1.1 Host: 192.168.216.133 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:73.0...

Symantec Web Gateway 5.0.2.8 Remote Code Execution

Title: Preauth RCE in Symantec Web Gateway 5.0.2.8 Date: 26.03.2020 Vendor: www.symantec.com Vulnerable software: www.symantec.com Repo: https://github.com/c610/free/ !/usr/bin/env python seemantech.py - small preauth poc for symantec web gateway 27.03.2020 by code610 more :...

Broadcom Symantec Data Center Security Manager Component Elevation of Privilege Vulnerability

Broadcom Symantec Data Center Security Manager Component is a data protection solution from Broadcom, Inc. A security vulnerability exists in Broadcom Symantec Data Center Security Manager Component versions prior to 6.8.2. An attacker could exploit this vulnerability to gain elevated privileges...

CVE-2020-5832

Symantec Data Center Security Manager Component, prior to 6.8.2 aka 6.8 MP2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected...

CVE-2020-5832

Symantec Data Center Security Manager Component, prior to 6.8.2 aka 6.8 MP2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected...

Privilege escalation

Symantec Data Center Security Manager Component, prior to 6.8.2 aka 6.8 MP2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected...

CVE-2020-5832

CVE-2020-5832 affects Symantec Data Center Security Manager Component prior to 6.8.2 (6.8 MP2). The vulnerability is a privilege escalation in which an attacker may attempt to gain elevated access to protected resources. Mitigation is upgrading to version 6.8.2 (6.8 MP2); Symantec’s advisories an...

CVE-2020-5832

Symantec Data Center Security Manager Component, prior to 6.8.2 aka 6.8 MP2, may be susceptible to a privilege escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected...

Data Center Security Privilege Escalation

Summary Symantec has released an update to address an issue that was discovered in the Data Center Security Manager component. Affected Products Data Center Security Manager Component --- CVE | Affected Versions | Remediation CVE-2020-5832 | Prior to 6.8.2 aka 6.8 MP2 | Upgrade 6.8.2 aka 6.8 MP2...

Symantec Endpoint Protection Multiple Issues

Summary Symantec has released updates to address issues that were discovered in the Symantec Endpoint Protection SEP, Symantec Endpoint Protection Manager SEPM, and Symantec Endpoint Protection Small Business Edition SEP SBE products. At this time, Symantec is not aware of any exploitations or...

CVE-2012-6277

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention DLP before 11.6.1, IBM Notes...

Memory corruption

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention DLP before 11.6.1, IBM Notes...

CVE-2012-6277

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention DLP before 11.6.1, IBM Notes...

CVE-2012-6277

CVE-2012-6277 concerns multiple vulnerabilities in Autonomy KeyView IDOL libraries used by IBM Notes/Domino, Symantec messaging/security products, and others. The issue arises from underlying memory-corruption flaws in KeyView IDOL, triggered by processing crafted input files, potentially enablin...

Symantec Endpoint Protection Manager Information Disclosure Vulnerability (CNVD-2020-09963)

Symantec Endpoint Protection Manager SEPM is a suite of enterprise-grade virus protection software from Symantec USA. The software protects against malicious attacks such as viruses, worms, and Trojan horses. Symantec Endpoint Protection Manager suffers from an information disclosure vulnerabilit...