CVE-2015-8149

High

Published: 18/02/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The LDAP service in Symantec Encryption Management Server (SEMS) version 3.3.2 before MP12 is vulnerable to remote attacks that can lead to service outages due to heap memory corruption.

Risk Assessment

Attackers can exploit this vulnerability to disrupt system operations, potentially causing downtime for the organization.

Recommendation

It is recommended to upgrade to the latest version of SEMS to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12

CVE-2015-8148High
The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information about administrator accounts via a modified request.

Original NVD description (English source)

The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (heap memory corruption and service outage) via crafted requests.