Multiple Symantec Products CVE-2014-3440 Remote Code Execution Vulnerability

Bugtraq ID:	72091
Class:	Design Error
CVE:	CVE-2014-3440
Remote:	Yes
Local:	No
Published:	Jan 19 2015 12:00AM
Updated:	May 15 2015 12:04AM
Credit:	Balint Varga-Perke with Silent Signal working through Beyond Security
Vulnerable:
Not Vulnerable:

Multiple Symantec Products CVE-2014-3440 Remote Code Execution Vulnerability

Multiple Symantec products are prone to a remote code-execution vulnerability.

Attackers can exploit this issue to execute arbitrary code in the context of the server. Successful exploits will allow an attacker to potentially gain access to a command shell with elevated privileges on the server.

This issue is fixed in the following versions:

Symantec Critical System Protection 5.2.9 MP6
Symantec Data Center Security: Server Advanced 6.0.1

Multiple Symantec Products CVE-2014-3440 Remote Code Execution Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Multiple Symantec Products CVE-2014-3440 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Symantec Products CVE-2014-3440 Remote Code Execution Vulnerability

References:

• Symantec Homepage (Symantec)