As an update, Keep track of this thread as well.
https://forums.symantec.com/syment/board/message?board.id=endpoint_protection11message.id=26289
--
From: Sandeep Cheema 51l...@live.in
Sent: Friday, February 20, 2009 11:01 AM
To: bugtraq
overflow has happened or
averted but its all very interesting.
Regards, Sandeep Cheema
Message Edited by S1l3nc3 pl3as3 on 02-18-2009 11:09 PM
Message Edited by S1l3nc3 pl3as3 on 02-18-2009 11:15 PM
--
From: Sandeep Cheema 51l
into it to come up with an exploit with it.
Thank you.
Regards, Sandeep
.--
From: Jon Kloske j...@uq.edu.au
Sent: Friday, February 13, 2009 9:11 AM
To: Sandeep Cheema 51l...@live.in
Cc: bugtraq@securityfocus.com
Subject: RE: SEP(Symantec) Bug
Hi Sandeep
Hi,
Probably this bug exists on majorly all the software's but security
software's like antivirus and firewall have to bucket it which is not what
its for SEP.
I have tested it on all versions of SEP from 11.0.776 to 11.0.4000(XP and
2k3)
You can kill smc.exe with the help of drwtsn32.exe
process loads up when you logoff and log back in (or restart)but the icon
does not show up in the taskbar.
Thank you.
Regards, Sandeep
--
From: Sandeep Cheema 51l...@live.in
Sent: Friday, February 13, 2009 7:03 PM
To: bugtraq@securityfocus.com
As an update its not happening for Users account, Though no access denied.
Anyone knows why?
Thank you.
Regards, Sandeep
--
From: Sandeep Cheema 51l...@live.in
Sent: Friday, February 13, 2009 6:18 PM
To: bugtraq@securityfocus.com
Subject
Just as an update couldn't get any further other than t.he fact that
SMCGui.exe is getting killed as its running in the user account and SMC.exe
in the system account.
Thank you.
Regards, Sandeep
--
From: Sandeep Cheema 51l...@live.in
Sent
You are right, but that will require admin privilege. Isn't it ?
Regards, Sandeep
--
From: David Calabro dcala...@transitionalwork.org
Sent: Saturday, February 14, 2009 1:02 AM
To: 'Sandeep Cheema' 51l...@live.in; bugtraq@securityfocus.com
Subject
Hi,
There is a bug with the Symantec Endpoint Protection( Tested on all
versions till 11.0.4000)
When you execute the following command smc.exe -p ~ the smcgui.exe
crashes. You don't need admin privilege for this.
Regards, Sandeep
51l3n7[at]live.in
