PT-2012-2471 · Symantec · Symantec Endpoint Protection+1

Publicado 2012-05-23 · Atualizado 2013-01-04 · CVE-2012-0295

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection (SEP) versions 12.1 through 12.1 before RU1-MP1

Description The issue allows remote attackers to conduct file-insertion attacks and execute arbitrary code. This is achieved by leveraging exploitation in the Manager service within the management console.

Recommendations For Symantec Endpoint Protection (SEP) versions 12.1 through 12.1 before RU1-MP1, update to version 12.1 RU1-MP1 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-0295

Produtos afetados

Symantec Endpoint Protection

Symantec Endpoint Protection Client

Referências · 6

• http://securityfocus.com/bid/53183 · Nota
• http://securitytracker.com/id?1027093 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0295 · Nota
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01 · Aviso do Fabricante
• http://securityfocus.com/bid/53184 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-0295 · Nota de Segurança