PT-2012-5349 · Symantec+1 · Symantec Enterprise Security Manager+1

Published 2012-12-18 · Updated 2013-03-14 · CVE-2012-4350

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Enterprise Security Manager (ESM) versions prior to 11.0

Description The issue concerns unquoted Windows search path vulnerabilities in the Manager and Agent components. This could allow local users to gain privileges via unspecified vectors.

Recommendations For versions prior to 11.0, update to version 11.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2012-4350

Affected Products

Symantec Enterprise Security Manager

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2012-4350 · Security Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121213_00 · Note
• http://securitytracker.com/id?1027874 · Note
• http://securityfocus.com/bid/56915 · Note