Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2013-5010

The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.

Published

2014-01-10T16:47:05.130

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.6 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-264
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application symantec endpoint_protection ≤ 11.0.7.3 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.1 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.2 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.4 Yes
Application symantec endpoint_protection 11.0.3001 Yes
Application symantec endpoint_protection 11.0.6000 Yes
Application symantec endpoint_protection 11.0.6100 Yes
Application symantec endpoint_protection 11.0.6200 Yes
Application symantec endpoint_protection 11.0.6200.754 Yes
Application symantec endpoint_protection 11.0.6300 Yes
Application symantec endpoint_protection 11.0.7000 Yes
Application symantec endpoint_protection 11.0.7100 Yes
References