Symantec Endpoint Protection CVE-2011-0551 Cross Site Request Forgery Vulnerability

Bugtraq ID:	49101
Class:	Unknown
CVE:	CVE-2011-0551
Remote:	Yes
Local:	No
Published:	Aug 10 2011 12:00AM
Updated:	Jan 16 2012 09:30PM
Credit:	Sow Ching Shiong through Secunia Labs
Vulnerable:	Symantec Endpoint Protection 11.0 RU6-MP3(11.0.6300) 0 Symantec Endpoint Protection 11.0 RU6-MP2(11.0.6200) 0 Symantec Endpoint Protection 11.0 RU6-MP1(11.0.6100) 0 Symantec Endpoint Protection 12.1 Symantec Endpoint Protection 12.1 Symantec Endpoint Protection 11.0 RU6(11.0.600x)
Not Vulnerable:	Symantec Endpoint Protection 12.1 RU1 Symantec Endpoint Protection 11 RU7

Symantec Endpoint Protection CVE-2011-0551 Cross Site Request Forgery Vulnerability

Symantec Endpoint Protection is prone to an unspecified cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain administrative actions and gain unauthorized access to the affected application. Other attacks are also possible.

The following products are vulnerable:

Symantec Endpoint Protection 11.0 RU6(11.0.600x)
Symantec Endpoint Protection 11.0 RU6-MP1(11.0.6100)
Symantec Endpoint Protection 11.0 RU6-MP2(11.0.6200)
Symantec Endpoint Protection 11.0 RU6-MP3(11.0.6300)

Symantec Endpoint Protection CVE-2011-0551 Cross Site Request Forgery Vulnerability

To exploit this issue, an attacker must entice an unsuspecting victim to open a malicious URI.

Symantec Endpoint Protection CVE-2011-0551 Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the reference for more details.

Symantec Endpoint Protection CVE-2011-0551 Cross Site Request Forgery Vulnerability

References:

• Endpoint Protection Homepage (Symantec)
  
• Symantec Homepage (Symantec)
  
• SYM12-001 Security Advisories Relating to Symantec Products - Symantec Endpoint (Symantec)
  
• Symantec Endpoint Protection Manager Cross-Site Request Forgery and Cross-Site S (Symantec)