PT-2013-3275 · Symantec · Symantec Endpoint Protection Small Business Edition+1

Publicado 2013-06-20 · Atualizado 2013-06-20 · CVE-2013-1612

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions 12.1.x through 12.1.2 Symantec Endpoint Protection Center Small Business Edition versions 12.0.x

Description A buffer overflow issue exists in the secars.dll component of the management console, allowing remote attackers to execute arbitrary code.

Recommendations For Symantec Endpoint Protection Manager versions 12.1.x through 12.1.2, update to version 12.1.3 or later. For Symantec Endpoint Protection Center Small Business Edition versions 12.0.x, consider upgrading to a version that is not affected by this issue, as no specific fixed version is mentioned for this product.

Exploit

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2013-1612

Produtos afetados

Symantec Endpoint Protection Small Business Edition

Symantec Endpoint Protection Manager

Referências · 5

• 🔥 https://exploit-db.com/exploits/33056 · Exploit
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1612 · Nota
• http://securityfocus.com/bid/60542 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2013-1612 · Nota de Segurança
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&suid=20130618_00 · Nota