Multiple Infotecs Products CVE-2013-3496 Local Privilege Escalation Vulnerability

Bugtraq ID:	60050
Class:	Design Error
CVE:	CVE-2013-3496
Remote:	No
Local:	Yes
Published:	May 21 2013 12:00AM
Updated:	May 21 2013 12:00AM
Credit:	Maksim Chudakov and Andrey Kurtasanov
Vulnerable:
Not Vulnerable:

Multiple Infotecs Products CVE-2013-3496 Local Privilege Escalation Vulnerability

Multiple Infotecs products are prone to a local privilege-escalation vulnerability.

A local attacker can exploit this issue to execute arbitrary code context of the SYSTEM user or user with local administrative privileges.

The following are affected:

ViPNet Client 3.2.10 (15632) and prior
ViPNet Coordinator 3.2.10 (15632) and prior
ViPNet SafeDisk 4.1 (0.5643) and prior
VipNet Personal Firewall 3.1 and prior

Multiple Infotecs Products CVE-2013-3496 Local Privilege Escalation Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Infotecs Products CVE-2013-3496 Local Privilege Escalation Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

Multiple Infotecs Products CVE-2013-3496 Local Privilege Escalation Vulnerability

References: