CVE-2013-1609
High
Description
Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program.
SeverityHigh
CVSS7.8
Exploit probability—
ProductSymantec Enterprise Vault For File System Archiving
PublishedMar 26, 2013
First seenMar 26, 2013
Weakness typeCWE-428CWE-428
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec enterprise_vault_for_file_system_archiving | v ≤ 9.0.3, 10.0.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.