Multiple Symantec Products CVE-2014-9226 Multiple Local Security Bypass Vulnerabilities

Bugtraq ID:	72095
Class:	Design Error
CVE:	CVE-2014-9226
Remote:	No
Local:	Yes
Published:	Jan 19 2015 12:00AM
Updated:	Jan 19 2015 12:00AM
Credit:	Stefan Viehbock
Vulnerable:	Symantec Data Center Security: Server Advanced Server 6.0 Symantec Critical System Protection 5.2.9 Symantec Critical System Protection 5.2.9 MP5
Not Vulnerable:	Symantec Data Center Security: Server Advanced Server 6.0.1 Symantec Critical System Protection 5.2.9 MP6

Multiple Symantec Products CVE-2014-9226 Multiple Local Security Bypass Vulnerabilities

Multiple Symantec products are prone to multiple local security-bypass vulnerabilities.

Local attackers can exploit these issues to bypass certain security restrictions and gain unauthorized access. This may aid in further attacks.

This issue is fixed in the following versions:

Symantec Critical System Protection 5.2.9 MP6
Symantec Data Center Security: Server Advanced 6.0.1

Multiple Symantec Products CVE-2014-9226 Multiple Local Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.