5 results (0.009 seconds)

CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 2

SmcGui.exe in Sygate Protection Agent 5.0 build 6144 allows local users to obtain management control over the agent by executing the GUI (SmcGui.exe) and then killing the process, which causes the privileged management GUI to launch. • http://secunia.com/advisories/18175 http://www.irmplc.com/advisory014.htm http://www.securityfocus.com/archive/1/419909/100/0/threaded http://www.securityfocus.com/bid/15977 •

CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 0

Sygate Security Agent (SSA) in Sygate Secure Enterprise 3.5 through 4.1 does not prevent the security policy from being updated by unprivileged users, which allows local users to modify the policy by exporting the policy file, changing it, and importing it back into SSA. • http://marc.info/?l=bugtraq&m=111335219201828&w=2 •

CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0

Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules. Sygate Enforcer 3.5MR1 y anteriores permiten el paso de tráfico de multidifusión antes de la autenticación, lo que podría permitir a atacantes remotos saltarse las reglas de filtrado. • http://marc.info/?l=bugtraq&m=109215731626998&w=2 http://www.corsaire.com/advisories/c031120-003.txt http://www.securityfocus.com/bid/10908 https://exchange.xforce.ibmcloud.com/vulnerabilities/16948 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session. Sygate Secure Enterprise (SSE) 3.5MR3 y anteriores no cambian la clave usada para cifrar datos, lo que permite a atacantes remotos causar una denegación de servicio (consumición de recursos) capturando una sesión y reproduciéndola repetidamente. • http://marc.info/?l=bugtraq&m=109215685731675&w=2 http://www.corsaire.com/advisories/c031120-002.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/16945 •

CVSS: 5.0EPSS: 0%CPEs: 1EXPL: 0

Sygate Enforcer 4.0 earlier allows remote attackers to cause a denial of service (service hang) by replaying a malformed discovery packet to UDP port 39999. Sygate Enforcer 4.0 y anteriores permite a atacantes remotos causar una denegación de servicio (cuelgue) reenviando un paquete de descubierta malformado al puerto UDP 39999 • http://marc.info/?l=bugtraq&m=109215951022437&w=2 http://www.corsaire.com/advisories/c031120-001.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/16949 •