Symantec Endpoint Protection Manager CVE-2013-5015 Local SQL Injection Vulnerability

Bugtraq ID:	65467
Class:	Input Validation Error
CVE:	CVE-2013-5015
Remote:	No
Local:	Yes
Published:	Feb 13 2014 12:00AM
Updated:	Feb 26 2014 01:31PM
Credit:	SEC Consult
Vulnerable:
Not Vulnerable:

Symantec Endpoint Protection Manager CVE-2013-5015 Local SQL Injection Vulnerability

Symantec Endpoint Protection Manager is prone to a local SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query.

An authenticated attacker can exploit this issue to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

The following versions are vulnerable:

Symantec Endpoint Protection Manager 11.0
Symantec Endpoint Protection Center Small Business Edition 12.0
Symantec Endpoint Protection Manager 12.1

Symantec Endpoint Protection Manager CVE-2013-5015 Local SQL Injection Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/65467.py
• /data/vulnerabilities/exploits/65467.rb

Symantec Endpoint Protection Manager CVE-2013-5015 Local SQL Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Symantec Endpoint Protection Manager CVE-2013-5015 Local SQL Injection Vulnerability

References:

• Symantec Homepage (Symantec)