Vulnerability Description
Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x before 10.0.1 allow local users to gain privileges via a Trojan horse program.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Enterprise Vault For File System Archiving | <= 9.0.3 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/58617
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit
- http://www.securityfocus.com/bid/58617
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit
FAQ
What is CVE-2013-1609?
CVE-2013-1609 is a vulnerability with a CVSS score of 7.8 (HIGH). Multiple unquoted Windows search path vulnerabilities in the (1) File Collector and (2) File PlaceHolder services in Symantec Enterprise Vault (EV) for File System Archiving before 9.0.4 and 10.x befo...
How severe is CVE-2013-1609?
CVE-2013-1609 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-1609?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Enterprise Vault For File System Archiving.