PT-2014-5324 · Symantec · Symantec Endpoint Protection Manager

Published 2014-11-07 · Updated 2018-10-09 · CVE-2014-3439

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection Manager (SEPM) versions 12.1 through 12.1 before RU5

Description The issue allows remote attackers to write to arbitrary files.

Recommendations For Symantec Endpoint Protection Manager (SEPM) versions 12.1 through 12.1 before RU5, update to RU5 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2014-3439

Affected Products

Symantec Endpoint Protection Manager

References · 9

• 🔥 https://exploit-db.com/exploits/35181 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2014/Nov/7 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-3439 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98527 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20141105_00 · Note
• http://securitytracker.com/id/1031176 · Note
• http://securityfocus.com/bid/70845 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3439 · Note
• http://securityfocus.com/archive/1/533918/100/0/threaded · Note