Detections
Analytics
Symantec Endpoint Protection Client < 11.0.7.4 / 12.1.2 (SYM14-001)
high Nessus Plugin ID 71993
Language:
Synopsis
The version of Symantec Endpoint Protection Client installed on the remote host is affected by multiple vulnerabilities.Description
The version of Symantec Endpoint Protection Client running on the remote host is either 11.x prior to 11.0.7.4 or 12.x prior to 12.1.2 (RU2). It is, therefore, affected by multiple security vulnerabilities :- The Application/Device Control in the SEP Client does not properly enforce custom policies, which could allow an attacker to circumvent policy restrictions in order to access files or directories on the remote host.
(CVE-2013-5010)
- The SEP Client is susceptible to a flaw caused by an unquoted search path, which could allow an attacker to gain elevated privileges via a crafted program in the %SYSTEMDRIVE% directory. (CVE-2013-5011)
Solution
Upgrade to 11.0.7.4 (11.x) / 12.1.2 RU2 (12.x) or later.See Also
Plugin Details
Severity: High
ID: 71993
File Name: symantec_endpoint_prot_client_sym14-001.nasl
Version: 1.3
Type: local
Agent: windows
Family: Windows
Published: 1/16/2014
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:symantec:endpoint_protection
Required KB Items: Antivirus/SAVCE/version
Exploit Ease: No known exploits are available
Patch Publication Date: 1/9/2014
Vulnerability Publication Date: 1/9/2014
Reference Information
CVE: CVE-2013-5010, CVE-2013-5011