CVE-2012-0305: Medium severity symantec backup exec system recovery vulnerability
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan horse DLL in the current working directory.
Affected Software
Event History
Frequently Asked Questions
What are the vulnerabilities associated with CVE-2012-0305?
CVE-2012-0305 describes an untrusted search path vulnerability that allows local users to gain elevated privileges via a Trojan horse DLL.
Which versions of software are affected by CVE-2012-0305?
CVE-2012-0305 affects Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5.
How can I mitigate the risk of CVE-2012-0305?
To mitigate CVE-2012-0305, ensure that you update to the latest service packs for the affected Symantec software.
What could happen if CVE-2012-0305 is exploited?
If exploited, CVE-2012-0305 could allow local users to execute arbitrary code with elevated privileges.
Is there an official fix for CVE-2012-0305?
Yes, Symantec has released updates that address CVE-2012-0305, which should be applied promptly.