CVE-2013-5015: SQL Injection
First published: Fri Feb 14 2014(Updated: )
SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 11.0 before 11.0.7405.1424 and 12.1 before 12.1.4023.4080, and Symantec Protection Center Small Business Edition 12.x before 12.1.4023.4080, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Credit: secure@symantec.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Symantec Endpoint Protection | =11.0 | |
| Symantec Endpoint Protection | =12.1.0 | |
| Symantec Endpoint Protection | =12.1.1 | |
| Symantec Endpoint Protection | =12.1.2 | |
| Symantec Endpoint Protection | =12.1.3 | |
| Symantec Protection Center | =12.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/103306
- http://www.exploit-db.com/exploits/31853
- http://www.exploit-db.com/exploits/31917
- http://www.securityfocus.com/bid/65467
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140213_00
- https://www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20140218-0_Symantec_Endpoint_Protection_Multiple_critical_vulnerabilities_wo_poc_v10.txt
Frequently Asked Questions
What is the severity of CVE-2013-5015?
CVE-2013-5015 is considered a high-severity vulnerability due to its potential for remote SQL injection attacks.
How do I fix CVE-2013-5015?
To fix CVE-2013-5015, upgrade your Symantec Endpoint Protection Manager to version 11.0.7405.1424 or later, or version 12.1.4023.4080 or later.
Who is affected by CVE-2013-5015?
CVE-2013-5015 affects users of Symantec Endpoint Protection Manager versions prior to 11.0.7405.1424 and 12.1.4023.4080, as well as those using Symantec Protection Center Small Business Edition 12.x.
What types of attacks can be executed using CVE-2013-5015?
CVE-2013-5015 allows remote authenticated users to execute arbitrary SQL commands, potentially compromising the database.
What are the affected software versions for CVE-2013-5015?
The affected software versions for CVE-2013-5015 include Symantec Endpoint Protection Manager 11.0 and 12.1 versions prior to their respective patches.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/symantec
- canonical/symantec endpoint protection
- version/symantec endpoint protection/11.0
- version/symantec endpoint protection/12.1.0
- version/symantec endpoint protection/12.1.1
- version/symantec endpoint protection/12.1.2
- version/symantec endpoint protection/12.1.3
- canonical/symantec protection center
- version/symantec protection center/12.0