Symantec LiveUpdate Administrator Local Privilege Escalation (CVE-2012-0304) Advisory

Key Information Summary Plugin Details ID: 59193 Filename: symantec_lua_privilege_escalation.nasl Version: 1.14 Type: local Agent: windows Family: Windows Release Date: 5/18/2012 Update Date: 12/4/2019 Supported Sensors: Nessus Agent, Nessus Vulnerability Information CVE: CVE-2012-0304 BID: 53903 TRA: TRA-2012-04 Risk Information Risk Factor: Medium CVSS v2 - Risk Factor: Medium - Base Score: 6.9 - Temporal Score: 5.7 - Vector: CVSS2#AV:L/AC:M/Au:N/C:C/I:C/A:C Vulnerability Summary Title: Symantec LiveUpdate Administrator Insecure Permissions Local Privilege Escalation (credentialed check) Overview: A privilege escalation vulnerability exists in the update management application installed on remote Windows hosts. Description: Versions of Symantec LiveUpdate Administrator (LUA) installed on remote hosts are affected by a privilege escalation vulnerability. The installation directory allows write access to the Everyone group. This directory contains batch files that are executed periodically with SYSTEM privileges. A local, unprivileged attacker can exploit this vulnerability by creating or modifying files that will be executed as SYSTEM, resulting in privilege escalation. Partial remediation for this issue was included in LUA 2.3.1, but it does not mitigate all possible attack vectors. Solution: Upgrade to Symantec LiveUpdate Administrator 2.3.2 or later. References: Tenable Research, Nessus

Goal Reached Thanks to every supporter — we hit 100%!

Symantec LiveUpdate Administrator Local Privilege Escalation (CVE-2012-0304) Advisory