PT-2020-7241 · Safend · Safend Data Protector Agent

Joseph Sheridan · Published 2020-01-13 · Updated 2020-01-22 · CVE-2012-4761

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Safend Data Protector Agent version 3.4.5586.9772

Description A Privilege Escalation issue exists in the unquoted Service Binary in SDPAgent or SDBAgent, which could allow a local malicious user to obtain privileges.

Recommendations For Safend Data Protector Agent version 3.4.5586.9772, update to a version that quotes the Service Binary in SDPAgent or SDBAgent to prevent privilege escalation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2012-4761

Affected Products

Safend Data Protector Agent

References · 4

• 🔥 https://seclists.org/bugtraq/2012/Nov/108 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-4761 · Security Note
• https://packetstormsecurity.com/files/cve/CVE-2012-4760 · Note
• http://securityfocus.com/bid/56740 · Note