PT-2014-2896 · Symantec · Symantec Protection Center Small Business Edition+1

Published 2014-02-14 · Updated 2015-07-30 · CVE-2013-5015

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager versions 11.0 through 11.0.7405.1424 Symantec Endpoint Protection Manager versions 12.1 through 12.1.4023.4080 Symantec Protection Center Small Business Edition versions 12.x through 12.1.4023.4080

Description The issue allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, which can be exploited through the management console.

Recommendations For Symantec Endpoint Protection Manager versions 11.0 through 11.0.7405.1424, update to version 11.0.7405.1424 or later. For Symantec Endpoint Protection Manager versions 12.1 through 12.1.4023.4080, update to version 12.1.4023.4080 or later. For Symantec Protection Center Small Business Edition versions 12.x through 12.1.4023.4080, update to version 12.1.4023.4080 or later.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2013-5015

Affected Products

Symantec Endpoint Protection Manager

Symantec Protection Center Small Business Edition

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/antivirus/symantec_endpoint_manager_rce.rb · Exploit
• 🔥 http://exploit-db.com/exploits/31853 · Exploit
• 🔥 https://exploit-db.com/exploits/31853 · Exploit
• 🔥 https://exploit-db.com/exploits/31917 · Exploit
• 🔥 http://exploit-db.com/exploits/31917 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-5015 · Security Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-5015 · Note
• http://securityfocus.com/bid/65467 · Note
• http://osvdb.org/103306 · Note
• https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt · Note