Vulnerability Name:

CVE-2012-0289 (CCN-75808)

Assigned:2012-05-22
Published:2012-05-22
Updated:2012-10-30
Summary:Buffer overflow in Symantec Endpoint Protection (SEP) 11.0.600x through 11.0.710x and Symantec Network Access Control (SNAC) 11.0.600x through 11.0.710x allows local users to gain privileges, and modify data or cause a denial of service, via a crafted script.
CVSS v3 Severity:9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.6 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
7.2 High (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
5.6 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-119
Vulnerability Consequences:Gain Privileges
References:Source: MITRE
Type: CNA
CVE-2012-0289

Source: CCN
Type: Packetstorm Security Website
Symantec End Point Protection / Network Access Control 11.x Code Execution

Source: CCN
Type: SA49248
Symantec Endpoint Protection Arbitrary File Deletion Vulnerability

Source: CCN
Type: OSVDB ID: 82149
Symantec Endpoint Protection Unspecified Code Function Boundary Error Local Privilege Escalation

Source: BID
Type: Exploit
51795

Source: CCN
Type: BID-51795
Symantec Endpoint Protection Local Privilege Escalation Vulnerability

Source: SECTRACK
Type: UNKNOWN
1027093

Source: CCN
Type: SYM12-008
Security Advisories Relating to Symantec Products - Symantec Endpoint Protection Multiple Issues

Source: CONFIRM
Type: Vendor Advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20120522_01

Source: XF
Type: UNKNOWN
symantec-endpoint-bo(75808)

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [05-23-2012]

Source: CCN
Type: ZDI-12-145
Symantec Endpoint Protection SemSvc.exe AgentServlet Remote Code Execution Vulnerability

Vulnerable Configuration:Configuration 1:
  • cpe:/a:symantec:endpoint_protection:11.0.6000:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:endpoint_protection:11.0.6100:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:endpoint_protection:11.0.6200:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:endpoint_protection:11.0.6200.754:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:endpoint_protection:11.0.6300:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:endpoint_protection:11.0.7000:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:endpoint_protection:11.0.7100:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/a:symantec:network_access_control:11.0.6000:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:network_access_control:11.0.6100:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:network_access_control:11.0.6200:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:network_access_control:11.0.6300:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:network_access_control:11.0.7000:*:*:*:*:*:*:*
  • OR cpe:/a:symantec:network_access_control:11.0.7100:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:symantec:endpoint_protection:11.0:ru6:*:*:*:*:*:*
  • OR cpe:/a:symantec:endpoint_protection:11.0:ru6mp1:*:*:*:*:*:*
  • OR cpe:/a:symantec:endpoint_protection:11.0:ru6mp2:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    symantec endpoint protection 11.0.6000
    symantec endpoint protection 11.0.6100
    symantec endpoint protection 11.0.6200
    symantec endpoint protection 11.0.6200.754
    symantec endpoint protection 11.0.6300
    symantec endpoint protection 11.0.7000
    symantec endpoint protection 11.0.7100
    symantec network access control 11.0.6000
    symantec network access control 11.0.6100
    symantec network access control 11.0.6200
    symantec network access control 11.0.6300
    symantec network access control 11.0.7000
    symantec network access control 11.0.7100
    symantec endpoint protection 11.0 ru6
    symantec endpoint protection 11.0 ru6mp1
    symantec endpoint protection 11.0 ru6mp2