Symantec Endpoint Protection Manager < 11 RU7 MP2 (SYM12-007 / SYM12-008) (credentialed check)
High Nessus Plugin ID 59366
SynopsisThe endpoint management application installed on the remote Windows host has multiple vulnerabilities.
DescriptionThe version of Symantec Endpoint Protection Manager installed on the remote host is less than 11 RU7 MP2 (11.7.7200) and has the following vulnerabilities :
- A denial of service vulnerability exists that could cause the web server to stop serving pages and, in some cases, crash the server. This vulnerability is only present on Windows 2003 systems with SP2 or below. (CVE-2012-1821)
- A buffer overflow exists that could allow a local attacker to elevate privileges. (CVE-2012-0289)
SolutionUpgrade to Symantec Endpoint Protection 11 RU7 MP2 or later.