PT-2016-4031 · Symantec · Symantec Endpoint Protection+2

Published 2016-06-30 · Updated 2017-09-01 · CVE-2015-8801

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:L/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Symantec Endpoint Protection version 12.1 before RU6 MP5

Description A race condition in the client allows local users to bypass intended restrictions on USB file transfer by conducting filesystem operations before the device manager recognizes a new USB device.

Recommendations For Symantec Endpoint Protection version 12.1 before RU6 MP5, update to RU6 MP5 or later to resolve the issue. As a temporary workaround, consider restricting access to USB devices until the update is applied.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

CWE-254

Related Identifiers

CVE-2015-8801

Affected Products

Symantec Endpoint Protection

Symantec Endpoint Protection Client

Symantec Endpoint Protection Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-8801 · Security Note
• https://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20160628_01 · Vendor Advisory
• http://securityfocus.com/bid/91446 · Note
• http://securitytracker.com/id/1036196 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-8801 · Note