PT-2014-4278 · Symantec · Symantec Workspace Streaming

Andrea Micalizzi + 1 · Published 2014-05-13 · Updated 2014-07-24 · CVE-2014-1649

Positive Technologies (AI Summary)

CVSS v2.0

7.9

High

Base vector

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Workspace Streaming versions prior to 7.5.0.749

Description The issue allows remote attackers to access files and functionality by sending a crafted XMLRPC request over HTTPS. This can potentially lead to remote code execution.

Recommendations For versions prior to 7.5.0.749, update to version 7.5.0.749 or later to resolve the issue. As a temporary workaround, consider restricting access to the XMLRPC interface until a patch is applied. Avoid using the putFile method in the XMLRPC request until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-1649

ZDI-14-127

Affected Products

Symantec Workspace Streaming

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/antivirus/symantec_workspace_streaming_exec.rb · Exploit
• 🔥 https://exploit-db.com/exploits/33521 · Exploit
• 🔥 http://exploit-db.com/exploits/33521 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-1649 · Security Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140512_00 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-14-127 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-14-127 · Note
• http://securityfocus.com/bid/67189 · Note