Published:2014/02/26 Last Updated:2014/02/26
JVN#02017463
Norman Security Suite vulnerable to privilege escalation
Overview
Norman Security Suite contains a privilege escalation vulnerability.
Products Affected
- Norman Security Suite 10.1 and earlier
Description
Norman Security Suite is an anti-virus software. Norman Security Suite contains a privilege escalation vulnerability.
Impact
An attacker with access to the target machine may obtain escalated privileges and execute arbitrary code.
Solution
Apply an Update
Apply the update according to the information provided by the vendor.
References
JPCERT/CC Addendum
Vulnerability Analysis by JPCERT/CC
Analyzed on 2014.02.26
Measures | Conditions | Severity |
---|---|---|
Access Required | requires you to login into the box to a shell or remote desktop |
|
Authentication | login caused to be created by an administrator |
|
User Interaction Required | the vulnerability can be exploited without an honest user taking any action |
|
Exploit Complexity | expertise and/or luck required (guessing correctly in medium-sized space, kernel expertise) |
|
Credit
Satoshi Tanda reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
Other Information
JPCERT Alert | |
JPCERT Reports | |
CERT Advisory |
|
CPNI Advisory |
|
TRnotes |
|
CVE |
CVE-2014-0816 |
JVN iPedia |
JVNDB-2014-000026 |
Update History
- 2014/02/26
- Information under the section "Other Information" was added.