Safend Data Protector Agent Multiple Local Security Vulnerabilities

Bugtraq ID:	56740
Class:	Unknown
CVE:	CVE-2012-4760 CVE-2012-4761 CVE-2012-4767
Remote:	No
Local:	Yes
Published:	Nov 29 2012 12:00AM
Updated:	Mar 19 2015 08:31AM
Credit:	Joseph Sheridan of ReactionIS
Vulnerable:
Not Vulnerable:

Safend Data Protector Agent Multiple Local Security Vulnerabilities

Safend Data Protector Agent is prone to multiple local security vulnerabilities including:

1. An information-disclosure vulnerability
2. Multiple privilege-escalation vulnerabilities

Local attackers may exploit these issues to obtain sensitive information or gain elevated privileges on the affected computer.

Safend Data (Client software) 3.4.5586.9772 is vulnerable. Other versions may also be affected.

Safend Data Protector Agent Multiple Local Security Vulnerabilities

An attacker uses readily available commands to exploit the local information-disclosure and privilege-escalation issues.

Safend Data Protector Agent Multiple Local Security Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Safend Data Protector Agent Multiple Local Security Vulnerabilities

References:

• Safend Data Protector Multiple Vulnerabilities (SecLists.Org)
  
• Safend Protector Homepage (Wave Systems)