Vulnerabilites related to symantec - ghost_solution_suite
Vulnerability from fkie_nvd
Published
2019-02-08 17:29
Modified
2024-11-21 03:55
Severity ?
Summary
Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| secure@symantec.com | http://www.securityfocus.com/bid/106684 | Third Party Advisory | |
| secure@symantec.com | https://support.symantec.com/en_US/article.SYMSA1474.html | Mitigation, Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/106684 | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://support.symantec.com/en_US/article.SYMSA1474.html | Mitigation, Vendor Advisory |
Impacted products
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:2.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C2510DED-29C5-4728-8FC9-E0AEAA5BA26F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:2.5:*:*:*:*:*:*:*",
"matchCriteriaId": "C188EF7F-925B-4233-B85B-54AD0A0C677D",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4789E917-D99A-4B7E-A061-7A3090DC350C",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf1:*:*:*:*:*:*",
"matchCriteriaId": "06742D1E-6944-4B9F-8BF8-8A41678E9803",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf2:*:*:*:*:*:*",
"matchCriteriaId": "B384051A-6898-438A-99B6-9FC256A6B030",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf3:*:*:*:*:*:*",
"matchCriteriaId": "E74E1685-A87A-4A11-B6C4-FAD54A43F104",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf4:*:*:*:*:*:*",
"matchCriteriaId": "A7C0B1C6-3C8A-4F7E-8AD3-5AFAA2677EB6",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.0:hf5:*:*:*:*:*:*",
"matchCriteriaId": "5861E90B-0830-44DB-8A77-764C6712F8AC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B97D085E-45E4-4FF5-88CF-E76667884419",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp1:*:*:*:*:*:*",
"matchCriteriaId": "4A89C8D4-0880-4875-A101-9AECBB4AACDE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp2:*:*:*:*:*:*",
"matchCriteriaId": "A89FBDA7-4B83-47A1-9302-BD50B04EE1E9",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp3:*:*:*:*:*:*",
"matchCriteriaId": "7B77ACB5-9FE8-489C-A0D6-DB28D0FC9ABC",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp4:*:*:*:*:*:*",
"matchCriteriaId": "34341314-EED5-49CE-A400-403AF575ABBE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp5:*:*:*:*:*:*",
"matchCriteriaId": "2E7E3290-9AE0-41A5-856E-F8A27E4B052E",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:mp6:*:*:*:*:*:*",
"matchCriteriaId": "E7690D5D-B1CA-4E0C-8BB6-EF39886CBFBF",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:*:*:*:*:*:*:*",
"matchCriteriaId": "AB3C24F1-A554-4217-BD29-A3A9763952D0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru1:*:*:*:*:*:*",
"matchCriteriaId": "3059E8B2-A30A-463D-94A4-40982DC47151",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru2:*:*:*:*:*:*",
"matchCriteriaId": "47FEB9B9-A945-4F5C-A7CB-DB0B9CD77C2F",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru3:*:*:*:*:*:*",
"matchCriteriaId": "817D3F61-48A1-4A09-BE47-19797424D3D4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru4:*:*:*:*:*:*",
"matchCriteriaId": "8D7440DF-A362-46FA-BDFD-B9E616211FE4",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru5:*:*:*:*:*:*",
"matchCriteriaId": "927FBB58-68D2-400E-8DE0-15C4C5717464",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru6:*:*:*:*:*:*",
"matchCriteriaId": "707F25BF-E3B9-4A46-AB96-BA3669C71248",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.2:ru7:*:*:*:*:*:*",
"matchCriteriaId": "C45F0996-B9A9-4E85-85FA-1B88B39FFE01",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.3:*:*:*:*:*:*:*",
"matchCriteriaId": "00D250C6-C1A6-46C1-AAB5-7274F3D542B5",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application."
},
{
"lang": "es",
"value": "Symantec Ghost Solution Suite (GSS), en versiones anteriores a la 3.3 RU1, podr\u00eda ser susceptible a una vulnerabilidad de secuestro de DLL, que es un tipo de problema por el cual un atacante potencial intenta ejecutar c\u00f3digo inesperado en una m\u00e1quina. Esto ocurre colocando un archivo potencialmente for\u00e1neo (DLL) que el atacante intenta ejecutar mediante una aplicaci\u00f3n conectada."
}
],
"id": "CVE-2018-18364",
"lastModified": "2024-11-21T03:55:47.840",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 6.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 6.8,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV30": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.0"
},
"exploitabilityScore": 1.3,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2019-02-08T17:29:00.257",
"references": [
{
"source": "secure@symantec.com",
"tags": [
"Third Party Advisory"
],
"url": "http://www.securityfocus.com/bid/106684"
},
{
"source": "secure@symantec.com",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"url": "https://support.symantec.com/en_US/article.SYMSA1474.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://www.securityfocus.com/bid/106684"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"url": "https://support.symantec.com/en_US/article.SYMSA1474.html"
}
],
"sourceIdentifier": "secure@symantec.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-426"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
Vulnerability from fkie_nvd
Published
2020-01-08 16:15
Modified
2024-11-21 02:56
Severity ?
Summary
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
References
| ▼ | URL | Tags | |
|---|---|---|---|
| secure@symantec.com | http://www.securityfocus.com/bid/94279 | Third Party Advisory, VDB Entry | |
| secure@symantec.com | http://www.securitytracker.com/id/1037302 | Third Party Advisory, VDB Entry | |
| secure@symantec.com | https://support.symantec.com/us/en/article.symsa1385.html | Vendor Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securityfocus.com/bid/94279 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.securitytracker.com/id/1037302 | Third Party Advisory, VDB Entry | |
| af854a3a-2127-422b-91ae-364da2661108 | https://support.symantec.com/us/en/article.symsa1385.html | Vendor Advisory |
Impacted products
| Vendor | Product | Version | |
|---|---|---|---|
| symantec | encryption_desktop | * | |
| symantec | endpoint_encryption | * | |
| symantec | endpoint_encryption | 7.6 | |
| symantec | ghost_solution_suite | 3.1 | |
| symantec | ghost_solution_suite | 3.1 | |
| symantec | ghost_solution_suite | 3.1 | |
| symantec | ghost_solution_suite | 3.1 | |
| symantec | it_management_suite | 7.6 | |
| symantec | it_management_suite | 8.0 |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:symantec:encryption_desktop:*:*:*:*:*:*:*:*",
"matchCriteriaId": "8A8D6248-A467-42E3-91FB-5DDF0D7F569C",
"versionEndExcluding": "10.4.1",
"versionStartIncluding": "10.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:endpoint_encryption:*:*:*:*:*:*:*:*",
"matchCriteriaId": "796EE952-7B18-4F2D-A1A7-529A7127C5F5",
"versionEndExcluding": "7.6",
"versionStartIncluding": "7.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:endpoint_encryption:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "AB53496E-9E66-4FB2-A86F-C6153A163305",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:-:*:*:*:*:*:*",
"matchCriteriaId": "2DC2C82A-C0DE-48E0-B805-49F26D523168",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:maintenance_pack1:*:*:*:*:*:*",
"matchCriteriaId": "A3068E0D-EEF2-4D63-AE0D-54025DBD78F5",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:maintenance_pack2:*:*:*:*:*:*",
"matchCriteriaId": "90A390EB-8DB2-4626-88A1-63E55BEEE716",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:ghost_solution_suite:3.1:maintenance_pack3:*:*:*:*:*:*",
"matchCriteriaId": "A3B6CC37-2CE2-4F6B-BE0A-50124B09D085",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:it_management_suite:7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "4F07D13E-7BAC-41E8-8774-6278ED4947CE",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:symantec:it_management_suite:8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "7D879F92-4706-4D48-BD87-BA689C59E786",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad de escalada de privilegios cuando se cargan bibliotecas DLL durante el arranque y el reinicio en Symantec IT Management Suite versiones 8.0 anteriores a la versi\u00f3n 8.0 HF4 y Suite versiones 7.6 anteriores a la versi\u00f3n 7.6 HF7, Symantec Ghost Solution Suite versiones 3.1 anteriores a la versi\u00f3n 3.1 MP4, Symantec Endpoint Virtualization versiones 7.x anteriores a la versi\u00f3n 7.6 HF7 y Symantec Encryption Desktop versiones 10.x anteriores a la versi\u00f3n 10.4.1, lo que podr\u00eda permitir a un usuario malicioso local ejecutar c\u00f3digo arbitrario."
}
],
"id": "CVE-2016-6590",
"lastModified": "2024-11-21T02:56:23.577",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "MEDIUM",
"cvssData": {
"accessComplexity": "MEDIUM",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.4,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:L/AC:M/Au:N/C:P/I:P/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.4,
"impactScore": 6.4,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": true
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2020-01-08T16:15:10.517",
"references": [
{
"source": "secure@symantec.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94279"
},
{
"source": "secure@symantec.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1037302"
},
{
"source": "secure@symantec.com",
"tags": [
"Vendor Advisory"
],
"url": "https://support.symantec.com/us/en/article.symsa1385.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securityfocus.com/bid/94279"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"url": "http://www.securitytracker.com/id/1037302"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
],
"url": "https://support.symantec.com/us/en/article.symsa1385.html"
}
],
"sourceIdentifier": "secure@symantec.com",
"vulnStatus": "Modified",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-269"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
cve-2018-18364
Vulnerability from cvelistv5
Published
2019-02-08 17:00
Modified
2024-09-16 22:35
Severity ?
EPSS score ?
Summary
Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/106684 | vdb-entry, x_refsource_BID | |
| https://support.symantec.com/en_US/article.SYMSA1474.html | x_refsource_CONFIRM |
Impacted products
| Vendor | Product | Version | ||
|---|---|---|---|---|
| Symantec Corporation | Ghost Solution Suite (GSS) |
Version: Prior to 3.3 RU1 |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-05T11:08:21.470Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "106684",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/106684"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.symantec.com/en_US/article.SYMSA1474.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "Ghost Solution Suite (GSS)",
"vendor": "Symantec Corporation",
"versions": [
{
"status": "affected",
"version": "Prior to 3.3 RU1"
}
]
}
],
"datePublic": "2019-01-22T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "DLL Hijack",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2019-02-09T10:57:01",
"orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
"shortName": "symantec"
},
"references": [
{
"name": "106684",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/106684"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.symantec.com/en_US/article.SYMSA1474.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secure@symantec.com",
"DATE_PUBLIC": "2019-01-22T00:00:00",
"ID": "CVE-2018-18364",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "Ghost Solution Suite (GSS)",
"version": {
"version_data": [
{
"version_value": "Prior to 3.3 RU1"
}
]
}
}
]
},
"vendor_name": "Symantec Corporation"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "Symantec Ghost Solution Suite (GSS) versions prior to 3.3 RU1 may be susceptible to a DLL hijacking vulnerability, which is a type of issue whereby a potential attacker attempts to execute unexpected code on your machine. This occurs via placement of a potentially foreign file (DLL) that the attacker then attempts to run via a linked application."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "DLL Hijack"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "106684",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/106684"
},
{
"name": "https://support.symantec.com/en_US/article.SYMSA1474.html",
"refsource": "CONFIRM",
"url": "https://support.symantec.com/en_US/article.SYMSA1474.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
"assignerShortName": "symantec",
"cveId": "CVE-2018-18364",
"datePublished": "2019-02-08T17:00:00Z",
"dateReserved": "2018-10-15T00:00:00",
"dateUpdated": "2024-09-16T22:35:04.102Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2016-6590
Vulnerability from cvelistv5
Published
2020-01-08 15:43
Modified
2024-08-06 01:36
Severity ?
EPSS score ?
Summary
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
References
| ▼ | URL | Tags |
|---|---|---|
| http://www.securityfocus.com/bid/94279 | x_refsource_MISC | |
| http://www.securitytracker.com/id/1037302 | x_refsource_MISC | |
| https://support.symantec.com/us/en/article.symsa1385.html | x_refsource_CONFIRM |
Impacted products
| Vendor | Product | Version | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ▼ | Symantec | IT Management Suite |
Version: 8.0 prior to 8.0 HF4 and 7.6 prior to 7.6 HF7 |
||||||||||||||||
|
|||||||||||||||||||
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T01:36:28.532Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/94279"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "http://www.securitytracker.com/id/1037302"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://support.symantec.com/us/en/article.symsa1385.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "IT Management Suite",
"vendor": "Symantec",
"versions": [
{
"status": "affected",
"version": "8.0 prior to 8.0 HF4 and 7.6 prior to 7.6 HF7"
}
]
},
{
"product": "Ghost Solution Suite",
"vendor": "Symantec",
"versions": [
{
"status": "affected",
"version": "3.1 prior to 3.1 MP4"
}
]
},
{
"product": "Symantec Endpoint Virtualization",
"vendor": "Symantec",
"versions": [
{
"status": "affected",
"version": "7.x prior to 7.6 HF"
}
]
},
{
"product": "Encryption Desktop",
"vendor": "Symantec",
"versions": [
{
"status": "affected",
"version": "0.x prior to 10.4.1"
},
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2016-11-15T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "untrusted search path",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2020-01-08T15:43:33",
"orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
"shortName": "symantec"
},
"references": [
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.securityfocus.com/bid/94279"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "http://www.securitytracker.com/id/1037302"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://support.symantec.com/us/en/article.symsa1385.html"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "secure@symantec.com",
"ID": "CVE-2016-6590",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "IT Management Suite",
"version": {
"version_data": [
{
"version_value": "8.0 prior to 8.0 HF4 and 7.6 prior to 7.6 HF7"
}
]
}
},
{
"product_name": "Ghost Solution Suite",
"version": {
"version_data": [
{
"version_value": "3.1 prior to 3.1 MP4"
}
]
}
},
{
"product_name": "Symantec Endpoint Virtualization",
"version": {
"version_data": [
{
"version_value": "7.x prior to 7.6 HF"
}
]
}
},
{
"product_name": "Encryption Desktop",
"version": {
"version_data": [
{
"version_value": "0.x prior to 10.4.1"
},
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "Symantec"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "untrusted search path"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://www.securityfocus.com/bid/94279",
"refsource": "MISC",
"url": "http://www.securityfocus.com/bid/94279"
},
{
"name": "http://www.securitytracker.com/id/1037302",
"refsource": "MISC",
"url": "http://www.securitytracker.com/id/1037302"
},
{
"name": "https://support.symantec.com/us/en/article.symsa1385.html",
"refsource": "CONFIRM",
"url": "https://support.symantec.com/us/en/article.symsa1385.html"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
"assignerShortName": "symantec",
"cveId": "CVE-2016-6590",
"datePublished": "2020-01-08T15:43:33",
"dateReserved": "2016-08-03T00:00:00",
"dateUpdated": "2024-08-06T01:36:28.532Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}