CVE-2013-4677 Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive info...
MediumCVSS 4.3
EPSS 0.32%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Backup Exec 2010 R3 before 2010 R3 SP3 and 2012 before SP2 uses weak permissions (Everyone: Read and Everyone: Change) for backup data files, which allows local users to obtain sensitive information or modify the outcome of a restore via direct access to these files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec backup exec | = 2010 | No fix listed |
| symantec backup exec | = 2010_r3-sp1 | No fix listed |
| symantec backup exec | = 2010_r3-sp2 | No fix listed |
| symantec backup exec | = 2012 | No fix listed |
| symantec backup exec | = 2012-sp1 | No fix listed |
References
- 95939 vdb-entry
- 61487 vdb-entry
- www.symantec.com vendor-advisory