NGS00315 Patch Notification: Symantec Enterprise Security Management Agent Privilege Escalation

Medium Risk Vulnerability in Symantec Enterprise Security Management 04 February 2013 Gavin Jones of NCC Group has discovered a Medium risk vulnerability in Symantec Enterprise Security Management 9.0.1 Agent version 9.0.1153.20001 Impact: Privilege escalation Versions affected: Symantec Enterpri...

NGS00336 Patch Notification: Symantec Network Access Control Privilege Escalation

Medium Risk Vulnerability in Symantec Network Access Control 04 February 2013 Gavin Jones of NCC Group has discovered a Medium risk vulnerability in Symantec Endpoint Protection Version 12.1.1000.157.105 Impact: Privilege escalation Versions affected: Symantec Network Access Control v12.1 and...

Symantec Web Gateway 5.0.3 RCE

Remote command execution vulnerability in Symantec Web Gateway fromha.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Exprespam Android Malware Steals Upwards to 75,000 Bits of Information

Early research from Symantec estimates that spammers behind a new type of Android malware may have already stolen “between 75,000 and 450,000 pieces of personal information” from Japanese users. While these numbers may be disparate it does suggest the malware, , has been successful since popping ...

Symantec Web Gateway 5.0.3 SQLi

SQL Injection vulnerability in Symantec Web Gateway search.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Take down of fifth most widespread 'Virut Botnet'

NASK the domain registrar that operates the ".pl" Polish top-level domain registry has seized multiple domains used for cyber crime activities by spreading Waledac malware distributed by the Virut botnet. According to Poland's Computer Emergency Response Team, Virut was first detected in 2006 and...

Take down of fifth most widespread 'Virut Botnet'

NASK the domain registrar that operates the “.pl” Polish top-level domain registry has seized multiple domains used for cyber crime activities by spreading Waledac malware distributed by the Virut botnet. According to Poland’s Computer Emergency Response Team, Virut was first detected in 2006 and...

Virut and Waledac Botnets Spamming from Shared Machines

In an analysis of Virut botnet samples, Symantec researchers observed the malware downloading Waledac variants, suggesting that the gangs responsible for each botnet may be cooperating with one another through some sort of affiliate program, or, at the very least, that the two threats coexist and...

Japanese Police 'Collar' Cat Carrying Malware Code

A hacker, or possibly group, that’s issued terrorists threats using remotely controlled computers in Japan remains at large despite a rare 3 million yen bounty and continuous games with media and police. The latest antic to generate considerable attention this week was leading Japanese authoritie...

Symantec full disk encryption software burst 0day vulnerabilities-vulnerability warning-the black bar safety net

Recently, foreign security research organization Nikita Tarakanov said in Symantec PGP Whole Disk Encryption, full disk encryption software found 0day vulnerabilities, the software kernel driver pgpwded. sys contains a cover of any memory of the vulnerability, execute arbitrary code, The affected...

Symantec PGP Whole Disk Encryption本地权限提升漏洞

Symantec PGP Whole Disk Encryption可用于笔记本，台式电脑和服务器提供高性能的完整磁盘加密 Symantec PGP Whole Disk Encryption在处理0x80022058 IOCTL时pgpwded.sys驱动存在一个错误，允许攻击者利用漏洞覆盖任意内核内存，成功利用漏洞可以以应用程序上下文执行任意代码 0 Symantec PGP Whole Disk Encryption 10.x 厂商解决方案 目前没有详细解决方案提供： http://www.symantec.com/whole-disk-encryption define...

Symantec Enterprise Security Manager/Agent Privilege Escalation Vulnerability

This host is installed with Symantec Enterprise Security Manager/Agent and is prone to local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecesmprivescvuln.nasl 6079 2017-05-08 09:03:33Z teissa $ Symantec Enterprise Security Manager/Agent Privilege Escalation...

Symantec Endpoint Protection Management Console RCE Vulnerability

Symantec Endpoint Protection is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Symantec Enterprise Security Manager/Agent Privilege Escalation Vulnerability

Symantec Enterprise Security Manager/Agent is prone to a local privilege escalation vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Symantec Endpoint Protection Management Console Remote Code Execution Vulnerability

This host is installed with Symantec Endpoint Protection and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: gbsymantecsepremotecodeexecvuln.nasl 6517 2017-07-04 13:34:20Z cfischer $ Symantec Endpoint Protection Management Console Remote Code Execution Vulnerabili...

Latest Internet Explorer zero-day linked to Elderwood Project

Last week we have seen ongoing attacks was exploiting a vulnerability in Internet Explorer 6, Internet Explorer 7, and Internet Explorer 8 that came to light after the Council on Foreign Relations website was hacked and was hosting the code. Symantec has linked exploits to the group responsible f...

Zero-Day Vulnerability in Symantec PGP Whole Disk Encryption

Symantec product PGP Whole Disk Encryption which is used to encrypt all the contents on the disk on a block-by-block basis having Zero-Day Vulnerability, according to a pastebin note. Note was posted on 25th Dec by Nikita Tarakanov, claiming that pgpwded.sys kernel driver distributed with Symante...

Zero-Day Vulnerability in Symantec PGP Whole Disk Encryption

Symantec product PGP Whole Disk Encryption which is used to encrypt all the contents on the disk on a block-by-block basis having Zero-Day Vulnerability, according to a pastebin note. Note was posted on 25th Dec by Nikita Tarakanov, claiming that pgpwded.sys kernel driver distributed with Symante...

Symantec Messaging Gateway Save.do Cross Site Request Forgery (CVE-2012-0308)

A cross-site request forgery CSRF vulnerability has been reported in Symantec Messaging Gateway. The vulnerability is due to errors while validating user input. A remote attacker can exploit this vulnerability by enticing a user to open a specially crafted URI. Successful exploitation would allow...

CVE-2012-4348

The management console in Symantec Endpoint Protection SEP 11.0 before RU7-MP3 and 12.1 before RU2, and Symantec Endpoint Protection Small Business Edition 12.x before 12.1 RU2, does not properly validate input for PHP scripts, which allows remote authenticated users to execute arbitrary code via...