Lucene search

MitreCVE-2012-4349

HistoryDec 11, 2012 - 12:18 p.m.

CVE-2012-4349

2012-12-1112:18:36

mitre

web.nvd.nist.gov

symantec

snac

windows

vulnerability

unquoted path

privilege escalation

cve-2012-4349

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

Percentile

9.5%

JSON

Unquoted Windows search path vulnerability in Symantec Network Access Control (SNAC) 12.1 before RU2 allows local users to gain privileges via unspecified vectors.

Affected configurations

Nvd

Node

symantecnetwork_access_controlMatch12.1

symantecnetwork_access_controlMatch12.1.1

symantecnetwork_access_controlMatch12.1.1.1

VendorProductVersionCPE
symantecnetwork_access_control12.1cpe:2.3:a:symantec:network_access_control:12.1:*:*:*:*:*:*:*
symantecnetwork_access_control12.1.1cpe:2.3:a:symantec:network_access_control:12.1.1:*:*:*:*:*:*:*
symantecnetwork_access_control12.1.1.1cpe:2.3:a:symantec:network_access_control:12.1.1.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	network_access_control	12.1	cpe:2.3:a:symantec:network_access_control:12.1:::::::*
symantec	network_access_control	12.1.1	cpe:2.3:a:symantec:network_access_control:12.1.1:::::::*
symantec	network_access_control	12.1.1.1	cpe:2.3:a:symantec:network_access_control:12.1.1.1:::::::*

References

www.securityfocus.com/bid/56847

www.securitytracker.com/id?1027864

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2012&suid=20121210_00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

Percentile

9.5%

JSON

Related for CVE-2012-4349