PT-2012-5349 · Symantec+1 · Symantec Enterprise Security Manager+1

Publicado 2012-12-18 · Atualizado 2013-03-14 · CVE-2012-4350

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Enterprise Security Manager (ESM) versions prior to 11.0

Description The issue concerns unquoted Windows search path vulnerabilities in the Manager and Agent components. This could allow local users to gain privileges via unspecified vectors.

Recommendations For versions prior to 11.0, update to version 11.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2012-4350

Produtos afetados

Symantec Enterprise Security Manager

Windows

Referências · 4

• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121213_00 · Nota
• http://securitytracker.com/id?1027874 · Nota
• http://securityfocus.com/bid/56915 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-4350 · Nota de Segurança