Symantec Endpoint Protection Manager < 11 RU7 MP2 (SYM12-007 / SYM12-008) (credentialed check)

This script is Copyright (C) 2012-2016 Tenable Network Security, Inc.


Synopsis :

The endpoint management application installed on the remote Windows
host has multiple vulnerabilities.

Description :

The version of Symantec Endpoint Protection Manager installed on the
remote host is less than 11 RU7 MP2 (11.7.7200) and has the following
vulnerabilities :

- A denial of service vulnerability exists that could
cause the web server to stop serving pages and, in some
cases, crash the server. This vulnerability is only
present on Windows 2003 systems with SP2 or below.
(CVE-2012-1821)

- A buffer overflow exists that could allow a local
attacker to elevate privileges. (CVE-2012-0289)

See also :

http://www.zerodayinitiative.com/advisories/ZDI-12-145/
http://seclists.org/fulldisclosure/2012/Aug/265
http://www.nessus.org/u?16ddf0c0
http://www.nessus.org/u?6b4a63b4

Solution :

Upgrade to Symantec Endpoint Protection 11 RU7 MP2 or later.

Risk factor :

High / CVSS Base Score : 7.2
(CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 5.6
(CVSS2#E:POC/RL:OF/RC:C)
Public Exploit Available : true

Family: Windows

Nessus Plugin ID: 59366 ()

Bugtraq ID: 50358
51795

CVE ID: CVE-2012-0289
CVE-2012-1821

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now