Symantec Endpoint Protection Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Symantec Endpoint Protection, which can be exploited by a remote user to cause remote code execution, denial of service and elevation of privilege.

1. A remote authenticated user can conduct network scans of the target Symantec Endpoint Protection Manager host to cause the target Network Threat Protection module to block all traffic to the server. The host becomes unresponsive to IIS-based web server requests.
2. A remote user can exploit a flaw in a service on the target Manager console to traverse the directory and delete files on the target system.
3. A remote user can then insert and execute arbitrary code with System privileges.
4. A local user can trigger a buffer overflow in a function on Symantec Network Access Control and Symantec Endpoint Protection to execute arbitrary code on the target system with elevated privileges.