Detections
Analytics
Symantec Enterprise Vault / Oracle Outside In Multiple Vulnerabilities (SYM11-011)
critical Nessus Plugin ID 56413
Language:
Synopsis
An archiving application installed on the remote host has multiple vulnerabilities.Description
The version of Symantec Enterprise Vault installed on the remote host uses a version of the Oracle Outside In libraries that contain multiple memory corruption vulnerabilities. A remote attacker could exploit these by sending an email with a malicious attachment, which could result in arbitrary code execution when it is processed for archiving.Solution
Apply the relevant hotfix referenced in SYM11-011.Note that versions earlier than 8.0.5 must be upgraded to 8.0.5 before the hotfix can be applied.
See Also
Plugin Details
Severity: Critical
ID: 56413
File Name: symantec_enterprise_vault_sym11-011.nasl
Version: 1.7
Type: local
Agent: windows
Family: Windows
Published: 10/7/2011
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.2
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: x-cpe:/a:symantec:enterprise_vault
Required KB Items: SMB/enterprise_vault/path, SMB/enterprise_vault/ver
Exploit Ease: No known exploits are available
Patch Publication Date: 9/1/2011
Vulnerability Publication Date: 7/19/2011
Exploitable With
ExploitHub (EH-11-407)