The version of Symantec Critical System Protection (SCSP) installed on the remote Windows host is 5.2.9.x prior to 5.2.9 MP6. It is, therefore, affected by multiple vulnerabilities :

  - A remote code execution vulnerability exists in the     Management Server Agent Control Interface due to     improper sanitization of user-uploaded files. An     authenticated, remote attacker can exploit this, by     uploading a log file, to execute arbitrary script code     with the privileges of the web server. (CVE-2014-3440)

  - A SQL injection (SQLi) vulnerability exists in the     management server due to the /sis-ui/authenticate script     not properly sanitizing user-supplied input to the 'ai'     POST parameter. An unauthenticated, remote attacker can     exploit this to inject or manipulate SQL queries in the     back-end database, resulting in the manipulation or     disclosure of arbitrary data. (CVE-2014-7289)

  - Multiple cross-site scripting (XSS) vulnerabilities     exist in the management server in the     WCUnsupportedClass.jsp script and SSO-Error.jsp script     due to improper validation of user-supplied input to the     'classname' and 'ErrorMsg' GET parameters. An     unauthenticated, remote attacker can exploit this to     execute arbitrary script code in a user's browser     session. (CVE-2014-9224)

  - An information disclosure vulnerability exists in the     management server due to a failure to properly restrict     internal server information. An authenticated, remote     attacker can exploit this, via a direct request to the     environment.jsp script, to disclose sensitive server     information. (CVE-2014-9225)

  - A privilege escalation vulnerability exists due to a     failure to sufficiently restrict access to certain host     functionality. A local attacker can exploit this to     bypass protection policies and gain elevated privileges.
    (CVE-2014-9226)

  - A SQL injection (SQLi) vulnerability exists in the     management server due to improper sanitization of     user-supplied input. An authenticated, remote attacker     can exploit this to inject or manipulate SQL queries in     the back-end database, resulting in the manipulation or     disclosure of arbitrary data. (CVE-2015-8157)

  - A path traversal issue exists due to improper     sanitization of user-supplied input. An authenticated,     remote attacker can exploit this, via a specially     crafted request, to execute arbitrary code.
    (CVE-2015-8798)

  - A path traversal issue exists that allows an     authenticated, remote attacker to write update-package     data to arbitrary agent locations, resulting in the     execution of arbitrary code. (CVE-2015-8799)

  - An unspecified flaw exists that is triggered when     handling process calls written to a specific named pipe.
    An authenticated, remote attacker can exploit this to     inject arbitrary arguments. (CVE-2015-8800)

The version of Symantec Critical System Protection (SCSP) installed on the remote Windows host is 5.2.9.x prior to 5.2.9 MP6. したがって、以下の複数の脆弱性による影響を受けます。

  - A remote code execution vulnerability exists in the Management Server Agent Control Interface due to improper sanitization of user-uploaded files. An authenticated, remote attacker can exploit this, by uploading a log file, to execute arbitrary script code with the privileges of the web server. (CVE-2014-3440)

  - A SQL injection (SQLi) vulnerability exists in the management server due to the /sis-ui/authenticate script not properly sanitizing user-supplied input to the 'ai' POST parameter. An unauthenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the manipulation or disclosure of arbitrary data. (CVE-2014-7289)

  - Multiple cross-site scripting (XSS) vulnerabilities exist in the management server in the WCUnsupportedClass.jsp script and SSO-Error.jsp script due to improper validation of user-supplied input to the 'classname' and 'ErrorMsg' GET parameters. An unauthenticated, remote attacker can exploit this to execute arbitrary script code in a user's browser session. (CVE-2014-9224)

  - An information disclosure vulnerability exists in the management server due to a failure to properly restrict internal server information. An authenticated, remote attacker can exploit this, via a direct request to the environment.jsp script, to disclose sensitive server information. (CVE-2014-9225)

  - A privilege escalation vulnerability exists due to a failure to sufficiently restrict access to certain host functionality. A local attacker can exploit this to bypass protection policies and gain elevated privileges.
    (CVE-2014-9226)

  - A SQL injection (SQLi) vulnerability exists in the management server due to improper sanitization of user-supplied input. An authenticated, remote attacker can exploit this to inject or manipulate SQL queries in the back-end database, resulting in the manipulation or disclosure of arbitrary data. (CVE-2015-8157)

  - A path traversal issue exists due to improper sanitization of user-supplied input. 認証されていないリモートの攻撃者がこれを悪用し、特別に細工されたリクエストで任意のコードを実行する可能性があります。
    (CVE-2015-8798)

  - A path traversal issue exists that allows an authenticated, remote attacker to write update-package data to arbitrary agent locations, resulting in the execution of arbitrary code. (CVE-2015-8799)

  - An unspecified flaw exists that is triggered when handling process calls written to a specific named pipe.
    An authenticated, remote attacker can exploit this to inject arbitrary arguments. (CVE-2015-8800)

遠端 Windows 主機上安裝的 Symantec Critical System Protection (SCSP) 版本比 5.2.9 MP6 舊。因此，會受到多個弱點影響：

- 管理伺服器代理程式控制介面中存在一個程式碼執行弱點。應用程式未正確驗證從用戶端系統上傳的記錄檔內容。(CVE-2014-3440)

- 管理伺服器中存在一個 SQL 插入弱點。(CVE-2014-7289)

- 管理主控台伺服器未正確篩選使用者輸入，可導致非持續的跨網站指令碼問題。(CVE-2014-9224)

- 管理伺服器未正確限制內部伺服器資訊。(CVE-2014-9225)

- 預設的保護原則未充分限制特定主機功能的存取權。
 (CVE-2014-9226)

請注意，已有 CVE-2014-9224、CVE-2014-9225 和 CVE-2014-9226 的因應措施可供使用

远程 Windows 主机上安装的 Symantec Critical System Protection (SCSP) 版本低于 5.2.9 MP6。因此，它受到多种漏洞的影响：

- 管理服务器代理控制界面中存在一个代码执行漏洞。应用程序未能正确验证从客户端系统上传的日志文件的内容。(CVE-2014-3440)

- 管理服务器中存在一个 SQL 注入漏洞。(CVE-2014-7289)

- 管理控制台服务器未正确过滤用户输入，这可导致非持久跨站脚本问题。(CVE-2014-9224)

- 管理服务器未正确限制内部服务器信息。(CVE-2014-9225)

- 默认保护策略未充分限制对某些主机功能的访问权限。
 (CVE-2014-9226)

请注意，CVE-2014-9224、CVE-2014-9225 和 CVE-2014-9226 提供变通方案。

ID	名前	製品	ファミリー	公開日	更新日	深刻度
80911	Symantec Critical System Protection 5.2.9.x < 5.2.9 MP6 Multiple Vulnerabilities (SYM15-001 / SYM16-009)	Nessus	Windows	2015/1/22	2019/11/25	high
80911	Symantec Critical System Protection 5.2.9.x < 5.2.9 MP6 Multiple Vulnerabilities (SYM15-001 / SYM16-009)	Nessus	Windows	2015/1/22	2019/11/25	high
80911	Symantec Critical System Protection 管理伺服器中有多個安全性問題 (SYM15-001)	Nessus	Windows	2015/1/22	2019/11/25	high
80911	Symantec Critical System Protection 管理服务器中的多个安全问题 (SYM15-001)	Nessus	Windows	2015/1/22	2019/11/25	high

検出

プラグインの検索

high

high

high

high