CVE-2014-0816 : Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown ve

Unspecified vulnerability in Norman Security Suite 10.1 and earlier allows local users to gain privileges via unknown vectors.

Published 2014-02-27 01:55:03

Updated 2014-02-27 16:38:13

Source JPCERT/CC

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2014-0816

Probability of exploitation activity in the next 30 days: 0.04%

Percentile, the proportion of vulnerabilities that are scored at or less: ~ 6 % EPSS Score History EPSS FAQ

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

http://jvndb.jvn.jp/jvndb/JVNDB-2014-000026

JVNDB-2014-000026 - JVN iPedia - 脆弱性対策情報データベース
http://jvn.jp/en/jp/JVN02017463/index.html

JVN#02017463: Norman Security Suite vulnerable to privilege escalation
http://jvn.jp/en/jp/JVN02017463/995510/index.html

Japan Vulnerability Notes/Information from Norman Safeground AS

Norman » Security Suite
Versions up to, including, (<=) 10.1
cpe:2.3:a:norman:security_suite:*:*:*:*:*:*:*:*
Matching versions
Norman » Security Suite » Version: 10.0
cpe:2.3:a:norman:security_suite:10.0:*:*:*:*:*:*:*
Matching versions
Norman » Security Suite » Version: 8.0
cpe:2.3:a:norman:security_suite:8.0:*:*:*:*:*:*:*
Matching versions