CVE-2012-0305

Name of the Vulnerable Software and Affected Versions Symantec System Recovery versions prior to 2011 SP2 Symantec Backup Exec System Recovery versions prior to 2010 SP5

Description The issue allows local users to gain privileges via a Trojan horse DLL in the current working directory. This is due to an untrusted search path vulnerability.

Recommendations For Symantec System Recovery versions prior to 2011 SP2, update to Symantec System Recovery 2011 SP2 or later. For Symantec Backup Exec System Recovery versions prior to 2010 SP5, update to Symantec Backup Exec System Recovery 2010 SP5 or later.