PT-2012-4828 · Symantec · Symantec Pgp Universal Server

Publicado 2012-09-04 · Atualizado 2013-02-14 · CVE-2012-3582

Positive Technologies (AI Summary)

CVSS v2.0

2.9

Baixa

Vetor base

AV:A/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symantec PGP Universal Server versions 3.2.x through 3.2.1 MP1

Description The issue arises from improper session management, specifically with key search requests. This could potentially allow remote attackers to read a private key under certain circumstances by making a request near the end of a user's session.

Recommendations For Symantec PGP Universal Server versions 3.2.x through 3.2.1 MP1, update to version 3.2.1 MP2 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2012-3582

Produtos afetados

Symantec Pgp Universal Server

Referências · 4

• http://securitytracker.com/id?1027467 · Nota
• http://securityfocus.com/bid/55246 · Nota
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120830_00 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-3582 · Nota de Segurança