Symantec Endpoint Protection Manager CVE-2012-4348 Remote Code Execution Vulnerability
BID:56846
Info
Symantec Endpoint Protection Manager CVE-2012-4348 Remote Code Execution Vulnerability
| Bugtraq ID: | 56846 |
| Class: | Design Error |
| CVE: |
CVE-2012-4348 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 10 2012 12:00AM |
| Updated: | Dec 17 2012 06:40PM |
| Credit: | An anonymous contributor working with Beyond Security's SecuriTeam Secure Disclosure program. |
| Vulnerable: |
Symantec Endpoint Protection 11.0 RU7 MP1 0 Symantec Endpoint Protection 11.0 RU6-MP3(11.0.6300) 0 Symantec Endpoint Protection 11.0 RU6-MP2(11.0.6200) 0 Symantec Endpoint Protection 11.0 RU6-MP1(11.0.6100) 0 Symantec Endpoint Protection 12.1 RU1-MP1 Symantec Endpoint Protection 12.1 MP1 Symantec Endpoint Protection 12.1 Symantec Endpoint Protection 12.0 Symantec Endpoint Protection 11.0 RU7 MP2 Symantec Endpoint Protection 11.0 RU7 MP1 Symantec Endpoint Protection 11.0 RU6-MP3(11.0.63 Symantec Endpoint Protection 11.0 RU6-MP2(11.0.62 Symantec Endpoint Protection 11.0 RU6 MP4 Symantec Endpoint Protection 11.0 RU6 MP3 Symantec Endpoint Protection 11.0 RU6 MP2 Symantec Endpoint Protection 11.0 RU6 MP1 Symantec Endpoint Protection 11.0 RU5 Symantec Endpoint Protection 11.0 RU4 Symantec Endpoint Protection 11.0 MR3 |
| Not Vulnerable: | |
Discussion
Symantec Endpoint Protection Manager CVE-2012-4348 Remote Code Execution Vulnerability
Symantec Endpoint Protection (SEP) Manager is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary PHP code in the context of the application.
This issue is fixed in the following versions:
Symantec Endpoint Protection 11.0 RU7-MP3
Symantec Endpoint Protection 12.1 RU2
Symantec Endpoint Protection (SEP) Manager is prone to a remote code-execution vulnerability.
Attackers can exploit this issue to execute arbitrary PHP code in the context of the application.
This issue is fixed in the following versions:
Symantec Endpoint Protection 11.0 RU7-MP3
Symantec Endpoint Protection 12.1 RU2
Exploit / POC
Symantec Endpoint Protection Manager CVE-2012-4348 Remote Code Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Symantec Endpoint Protection Manager CVE-2012-4348 Remote Code Execution Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
Symantec Endpoint Protection Manager CVE-2012-4348 Remote Code Execution Vulnerability
References:
References:
- Endpoint Protection Homepage (Symantec)