PT-2012-5348

CVE-2012-4349

Published

2012-12-11

Updated

2013-10-11

CVSS 2.0

7.2

High

MetricsAV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Network Access Control (SNAC) versions 12.1 through 12.1 before RU2

Description The issue allows local users to gain privileges via unspecified vectors due to an unquoted Windows search path vulnerability.

Recommendations For Symantec Network Access Control (SNAC) versions 12.1 through 12.1 before RU2, update to RU2 or later to resolve the issue.

Exploitability

Fix

Vendors

Affected products

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾