The version of Symantec Critical System Protection (SCSP) installed on the remote Windows host is 5.2.9.x prior to 5.2.9 MP6. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     Management Server Agent Control Interface due to     improper sanitization of user-uploaded files. An     authenticated, remote attacker can exploit this, by     uploading a log file, to execute arbitrary script code     with the privileges of the web server. (CVE-2014-3440)

  - A SQL injection (SQLi) vulnerability exists in the     management server due to the /sis-ui/authenticate script     not properly sanitizing user-supplied input to the 'ai'     POST parameter. An unauthenticated, remote attacker can     exploit this to inject or manipulate SQL queries in the     back-end database, resulting in the manipulation or     disclosure of arbitrary data. (CVE-2014-7289)

  - Multiple cross-site scripting (XSS) vulnerabilities     exist in the management server in the     WCUnsupportedClass.jsp script and SSO-Error.jsp script     due to improper validation of user-supplied input to the     'classname' and 'ErrorMsg' GET parameters. An     unauthenticated, remote attacker can exploit this to     execute arbitrary script code in a user's browser     session. (CVE-2014-9224)

  - An information disclosure vulnerability exists in the     management server due to a failure to properly restrict     internal server information. An authenticated, remote     attacker can exploit this, via a direct request to the     environment.jsp script, to disclose sensitive server     information. (CVE-2014-9225)

  - A privilege escalation vulnerability exists due to a     failure to sufficiently restrict access to certain host     functionality. A local attacker can exploit this to     bypass protection policies and gain elevated privileges.
    (CVE-2014-9226)

  - A SQL injection (SQLi) vulnerability exists in the     management server due to improper sanitization of     user-supplied input. An authenticated, remote attacker     can exploit this to inject or manipulate SQL queries in     the back-end database, resulting in the manipulation or     disclosure of arbitrary data. (CVE-2015-8157)

  - A path traversal issue exists due to improper     sanitization of user-supplied input. An authenticated,     remote attacker can exploit this, via a specially     crafted request, to execute arbitrary code.
    (CVE-2015-8798)

  - A path traversal issue exists that allows an     authenticated, remote attacker to write update-package     data to arbitrary agent locations, resulting in the     execution of arbitrary code. (CVE-2015-8799)

  - An unspecified flaw exists that is triggered when     handling process calls written to a specific named pipe.
    An authenticated, remote attacker can exploit this to     inject arbitrary arguments. (CVE-2015-8800)

The remote Symantec Data Center Security Server running on the remote host is affected by an information disclosure vulnerability in the '/webui/admin/environment.jsp' script, which discloses sensitive information about the server and software configuration.

The version of Symantec Critical System Protection (SCSP) installed on the remote Windows host is 5.2.9.x prior to 5.2.9 MP6. したがって、以下の複数の脆弱性による影響を受けます。

  - A remote code execution vulnerability exists in the Management Server Agent Control Interface due to improper sanitization of user-uploaded files. An authenticated, remote attacker can exploit this, by uploading a log file, to execute arbitrary script code with the privileges of the web server. (CVE-2014-3440)

  - A SQL injection (SQLi) vulnerability exists in the management server due to the /sis-ui/authenticate script not properly sanitizing user-supplied input to the 'ai' POST parameter. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the manipulation or disclosure of arbitrary data. (CVE-2014-7289)

  - Multiple cross-site scripting (XSS) vulnerabilities exist in the management server in the WCUnsupportedClass.jsp script and SSO-Error.jsp script due to improper validation of user-supplied input to the 'classname' and 'ErrorMsg' GET parameters. An unauthenticated, remote attacker can exploit this to execute arbitrary script code in a user's browser session. (CVE-2014-9224)

  - An information disclosure vulnerability exists in the management server due to a failure to properly restrict internal server information. An authenticated, remote attacker can exploit this, via a direct request to the environment.jsp script, to disclose sensitive server information. (CVE-2014-9225)

  - A privilege escalation vulnerability exists due to a failure to sufficiently restrict access to certain host functionality. A local attacker can exploit this to bypass protection policies and gain elevated privileges.
    (CVE-2014-9226)

  - A SQL injection (SQLi) vulnerability exists in the management server due to improper sanitization of user-supplied input. An authenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the manipulation or disclosure of arbitrary data. (CVE-2015-8157)

  - A path traversal issue exists due to improper sanitization of user-supplied input. 認証されていないリモートの攻撃者がこれを悪用し、特別に細工されたリクエストで任意のコードを実行する可能性があります。
    (CVE-2015-8798)

  - A path traversal issue exists that allows an authenticated, remote attacker to write update-package data to arbitrary agent locations, resulting in the execution of arbitrary code. (CVE-2015-8799)

  - An unspecified flaw exists that is triggered when handling process calls written to a specific named pipe.
    An authenticated, remote attacker can exploit this to inject arbitrary arguments. (CVE-2015-8800)

リモートホスト上で実行されているリモートの Symantec Data Center Security Server は、「/webui/admin/environment.jsp」スクリプト内の情報漏洩脆弱性の影響を受けます。その脆弱性は、サーバーおよびソフトウェアの構成に関する機密情報を漏洩します。

遠端主機上執行的遠端 Symantec Data Center Security Server受到 ‘/webui/admin/environment.jsp’ 指令碼中的一個資訊洩漏弱點影響，其可洩漏有關伺服器和軟體組態的敏感資訊。

遠端 Windows 主機上安裝的 Symantec Critical System Protection (SCSP) 版本比 5.2.9 MP6 舊。因此，會受到多個弱點影響：

- 管理伺服器代理程式控制介面中存在一個程式碼執行弱點。應用程式未正確驗證從用戶端系統上傳的記錄檔內容。(CVE-2014-3440)

- 管理伺服器中存在一個 SQL 插入弱點。(CVE-2014-7289)

- 管理主控台伺服器未正確篩選使用者輸入，可導致非持續的跨網站指令碼問題。(CVE-2014-9224)

- 管理伺服器未正確限制內部伺服器資訊。(CVE-2014-9225)

- 預設的保護原則未充分限制特定主機功能的存取權。
 (CVE-2014-9226)

請注意，已有 CVE-2014-9224、CVE-2014-9225 和 CVE-2014-9226 的因應措施可供使用

远程主机上运行的远程 Symantec Data Center Security Server 受到“/webui/admin/environment.jsp”脚本中信息泄露漏洞的影响，可泄露有关服务器和软件配置的敏感信息。

远程 Windows 主机上安装的 Symantec Critical System Protection (SCSP) 版本低于 5.2.9 MP6。因此，它受到多种漏洞的影响：

- 管理服务器代理控制界面中存在一个代码执行漏洞。应用程序未能正确验证从客户端系统上传的日志文件的内容。(CVE-2014-3440)

- 管理服务器中存在一个 SQL 注入漏洞。(CVE-2014-7289)

- 管理控制台服务器未正确过滤用户输入，这可导致非持久跨站脚本问题。(CVE-2014-9224)

- 管理服务器未正确限制内部服务器信息。(CVE-2014-9225)

- 默认保护策略未充分限制对某些主机功能的访问权限。
 (CVE-2014-9226)

请注意，CVE-2014-9224、CVE-2014-9225 和 CVE-2014-9226 提供变通方案。

ID	名稱	產品	系列	已發布	已更新	嚴重性
80911	Symantec Critical System Protection 5.2.9.x < 5.2.9 MP6 Multiple Vulnerabilities (SYM15-001 / SYM16-009)	Nessus	Windows	2015/1/22	2019/11/25	high
81551	Symantec Data Center Security Server 'environment.jsp' Information Disclosure (SYM15-001)	Nessus	CGI abuses	2015/2/26	2021/1/19	medium
80911	Symantec Critical System Protection 5.2.9.x < 5.2.9 MP6 Multiple Vulnerabilities (SYM15-001 / SYM16-009)	Nessus	Windows	2015/1/22	2019/11/25	high
81551	Symantec Data Center Security Server「environment.jsp」情報漏洩（SYM15-001）	Nessus	CGI abuses	2015/2/26	2021/1/19	medium
81551	Symantec Data Center Security Server 'environment.jsp' 資訊洩漏 (SYM15-001)	Nessus	CGI abuses	2015/2/26	2021/1/19	medium
80911	Symantec Critical System Protection 管理伺服器中有多個安全性問題 (SYM15-001)	Nessus	Windows	2015/1/22	2019/11/25	high
81551	Symantec Data Center Security Server ‘environment.jsp’ 信息泄露 (SYM15-001)	Nessus	CGI abuses	2015/2/26	2021/1/19	medium
80911	Symantec Critical System Protection 管理服务器中的多个安全问题 (SYM15-001)	Nessus	Windows	2015/1/22	2019/11/25	high

偵測

搜尋 Plugin

high

medium

high

medium

medium

high

medium

high