Multiple unquoted Windows search path vulnerabilities in the (1) Manager and (2) Agent components in Symantec Enterprise Security Manager (ESM) before 11.0 allow local users to gain privileges via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_security_manager | Symantec | * | 10.0 (including) |
| Enterprise_security_manager | Symantec | 6.0 (including) | 6.0 (including) |
| Enterprise_security_manager | Symantec | 6.5 (including) | 6.5 (including) |
| Enterprise_security_manager | Symantec | 6.5.0 (including) | 6.5.0 (including) |
| Enterprise_security_manager | Symantec | 6.5.1 (including) | 6.5.1 (including) |
| Enterprise_security_manager | Symantec | 6.5.2 (including) | 6.5.2 (including) |
| Enterprise_security_manager | Symantec | 6.5.3 (including) | 6.5.3 (including) |
| Enterprise_security_manager | Symantec | 9.0 (including) | 9.0 (including) |
| Enterprise_security_manager | Symantec | 9.0.1 (including) | 9.0.1 (including) |
References
- http://www.securityfocus.com/bid/56915
- http://www.securitytracker.com/id?1027874
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=2012\u0026suid=20121213_00
- http://www.securityfocus.com/bid/56915
- http://www.securitytracker.com/id?1027874
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=2012\u0026suid=20121213_00