Detections
Analytics
Symantec Enterprise Vault / Oracle Outside In Multiple Vulnerabilities (SYM12-004)
medium Nessus Plugin ID 58514
Language:
Synopsis
An archiving application installed on the remote host has multiple vulnerabilities.Description
The version of Symantec Enterprise Vault installed on the remote host uses a version of the Oracle Outside In libraries that contain multiple memory corruption vulnerabilities. A remote attacker could exploit these by sending an email with a malicious attachment, which could result in arbitrary code execution when it is processed for archiving.Solution
Apply the relevant hotfix referenced in SYM12-004.See Also
Plugin Details
Severity: Medium
ID: 58514
File Name: symantec_enterprise_vault_sym12-004.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 3/28/2012
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: Medium
Base Score: 6.9
Temporal Score: 6
Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: x-cpe:/a:symantec:enterprise_vault
Required KB Items: SMB/enterprise_vault/path, SMB/enterprise_vault/ver
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/5/2012
Vulnerability Publication Date: 1/17/2012
Exploitable With
Core Impact