Published:2014/02/26  Last Updated:2014/02/26

JVN#02017463
Norman Security Suite vulnerable to privilege escalation

Overview

Norman Security Suite contains a privilege escalation vulnerability.

Products Affected

  • Norman Security Suite 10.1 and earlier

Description

Norman Security Suite is an anti-virus software. Norman Security Suite contains a privilege escalation vulnerability.

Impact

An attacker with access to the target machine may obtain escalated privileges and execute arbitrary code.

Solution

Apply an Update
Apply the update according to the information provided by the vendor.

Vendor Status

Vendor Status Last Update Vendor Notes
Norman Safeground AS Vulnerable 2014/02/26

References

JPCERT/CC Addendum

Vulnerability Analysis by JPCERT/CC

Analyzed on 2014.02.26

Measures Conditions Severity
Access Required requires you to login into the box to a shell or remote desktop
  • Low-Mid
Authentication login caused to be created by an administrator
  • Low-Mid
User Interaction Required the vulnerability can be exploited without an honest user taking any action
  • High
Exploit Complexity expertise and/or luck required (guessing correctly in medium-sized space, kernel expertise)
  • Low-Mid

Description of each analysis measures

Credit

Satoshi Tanda reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Other Information

JPCERT Alert
JPCERT Reports
CERT Advisory
CPNI Advisory
TRnotes
CVE CVE-2014-0816
JVN iPedia JVNDB-2014-000026

Update History

2014/02/26
Information under the section "Other Information" was added.