PT-2012-2471 · Symantec · Symantec Endpoint Protection+1

Published 2012-05-23 · Updated 2013-01-04 · CVE-2012-0295

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection (SEP) versions 12.1 through 12.1 before RU1-MP1

Description The issue allows remote attackers to conduct file-insertion attacks and execute arbitrary code. This is achieved by leveraging exploitation in the Manager service within the management console.

Recommendations For Symantec Endpoint Protection (SEP) versions 12.1 through 12.1 before RU1-MP1, update to version 12.1 RU1-MP1 or later to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2012-0295

Affected Products

Symantec Endpoint Protection

Symantec Endpoint Protection Client

References · 6

• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0295 · Security Note
• http://securityfocus.com/bid/53183 · Note
• http://securitytracker.com/id?1027093 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-0295 · Note
• http://securityfocus.com/bid/53184 · Note