Symantec Web Gateway Detection

Detects the installed version of Symantec Web Gateway. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C ...

Symantec Web Gateway - Cross-Site Scripting

Symantec Web Gateway - Cross-Site Scripting Exploit Title: Symantec Web Gateway Cross Site Scripting Google Dork: N/A Date: 05/02/2012 Author: B00y@ Software Link: http://www.symantec.com/ Version: 5.0 Tested on: Windows XP Browser: IE 8.0 and Firefox 11.0 Symantec Web Gateway is susceptible to...

Symantec Web Gateway - Cross-Site Scripting

Exploit Title: Symantec Web Gateway Cross Site Scripting Google Dork: N/A Date: 05/02/2012 Author: B00y@ Software Link: http://www.symantec.com/ Version: 5.0 Tested on: Windows XP Browser: IE 8.0 and Firefox 11.0 Symantec Web Gateway is susceptible to cross site scripting when scanning downloaded...

Symantec pcAnywhere Insecure File Permissions Local Privilege Escalation

Exploit for windows platform in category local exploits ======= Summary ======= Name: Symantec pcAnywhere insecure file permissions local privilege escalation Release Date: 30 April 2012 Reference: NGS00117 Discoverer: Edward Torkington Vendor: Symantec Vendor Reference: Systems Affected: Symante...

Symantec pcAnywhere - Insecure File Permissions Privilege Escalation

======= Summary ======= Name: Symantec pcAnywhere insecure file permissions local privilege escalation Release Date: 30 April 2012 Reference: NGS00117 Discoverer: Edward Torkington Vendor: Symantec Vendor Reference: Systems Affected: Symantec pcAnywhere 12.5.x IT Management Suite 7.0 pcAnywhere...

Symantec pcAnywhere Insecure File Permissions / Privilege Escalation

======= Summary ======= Name: Symantec pcAnywhere insecure file permissions local privilege escalation Release Date: 30 April 2012 Reference: NGS00117 Discoverer: Edward Torkington Vendor: Symantec Vendor Reference: Systems Affected: Symantec pcAnywhere 12.5.x IT Management Suite 7.0 pcAnywhere...

Symantec pcAnywhere Remote Code Execution

======= Summary ======= Name: Symantec pcAnywhere Remote Code Execution Preauth Release Date: 30 April 2012 Reference: NGS00118 Discoverer: Edward Torkington Vendor: Symantec Vendor Reference: Systems Affected: Symantec pcAnywhere 12.5.x IT Management Suite 7.0 pcAnywhere Solution 12.5.x IT...

Symantec pcAnywhere - Insecure File Permissions Privilege Escalation

Symantec pcAnywhere - Insecure File Permissions Privilege Escalation ======= Summary ======= Name: Symantec pcAnywhere insecure file permissions local privilege escalation Release Date: 30 April 2012 Reference: NGS00117 Discoverer: Edward Torkington Vendor: Symantec Vendor Reference: Systems...

Flashback malware Creater earning $10,000 per day from Google Ads

Flashback malware Creater earning $10,000 per day from Google Ads In a recent analysis of the business model behind the Flashback Trojan, Symantec security researchers reported that the main objective of the malware is revenue generation through an ad-clicking component. Security researchers at...

NGS00117 Technical Advisory: Symantec pcAnywhere insecure file permissions local privilege escalation

======= Summary ======= Name: Symantec pcAnywhere insecure file permissions local privilege escalation Release Date: 30 April 2012 Reference: NGS00117 Discoverer: Edward Torkington [email protected] Vendor: Symantec Vendor Reference: Systems Affected: Symantec pcAnywhere 12.5.x IT...

Symantec PCAnywhere multiple security vulnerabilities

Code execution, privilege escalation...

NGS00118 Technical Advisory: Symantec pcAnywhere Remote Code Execution as SYSTEM

======= Summary ======= Name: Symantec pcAnywhere Remote Code Execution Preauth Release Date: 30 April 2012 Reference: NGS00118 Discoverer: Edward Torkington [email protected] Vendor: Symantec Vendor Reference: Systems Affected: Symantec pcAnywhere 12.5.x IT Management Suite 7.0...

Five Shocking Statistics From The Latest Internet Threat Report

Anti malware company Symantec released its threat report for 2011 on Monday. Buried in the dry statistics about the number of Web based attacks and malicious programs detected during the year are some surprising facts. Among them: religious-themed Web sites are among the dirtiest on the Internet...

Facebook strengthens security with AntiVirus Marketplace

Facebook strengthens security with AntiVirus Marketplace Facebook has launched Anti-Virus Marketplace , a new portal to protect the social network's users.Members are being encouraged to download anti-malware programs which they can use at no cost for six months. Facebook is strengthening its...

New Java Malware Exploits Both Windows And Mac Users

Symantec has discovered a new form of Java malware that infects both Apple and Windows machines, according to research posted on the company’s Security Response blog. The entry, penned by researcher Takashi Katsuki, describes a strain of Java Applet malware that either drops a Python-based malwar...

Conflicting Reports On Receding Flashback Levels

The number of Macs infected with the Flashback malware continue to decline but it’s not entirely clear to what degree. Initial numbers estimated that there were about 600,000 infected computers in total yet those numbers dropped last week to 237,000 and now, according to research by Symantec...

Malicious Android Apps Target Users in Japan

Cybercriminals targeted Android users in Japan with a number of malware-laced Android apps designed to mimic and masquerade as popular games, according to researchers at Symantec. Symantec said it has detected 29 such applications originating from seven developer accounts. Common coding...

Symantec AppStream Client LaunchObj ActiveX Control Code Execution (CVE-2008-4388)

A remote code execution vulnerability has been reported in Symantec AppStream Client...

Sabpab - Another Mac os Backdoor Trojan Discovered

Sabpab - Another Mac os Backdoor Trojan Discovered Security firm Sophos has discovered more malware for the Mac OS X platform called Sabpab. It uses the same Java vulnerability as Flashback to install itself as a "drive-by download." Users of older versions of Java now have still more malware to...

Symantec Experiment: Half Of Those Who Find Smartphones Don't Return Them

Good Samaritans are few and far between when it comes to lost cell phones, according to the conclusions of a social experiment conducted by security firm Symantec. Smart phones are unlikely to be returned by those who find them, but very likely to be perused for sensitive data including photos,...