SecuritySpace - CVE-2015-1484

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2015-1484

Description: Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.

Test IDs: 1.3.6.1.4.1.25623.1.0.805542

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2015-1484
BugTraq ID: 73925
http://www.securityfocus.com/bid/73925
http://www.securitytracker.com/id/1032133

CVE ID:	CVE-2015-1484
Description:	Unquoted Windows search path vulnerability in the agent in Symantec Workspace Streaming (SWS) 6.1 before SP8 MP2 HF7 and 7.5 before SP1 HF4, when AppMgrService.exe is configured as a service, allows local users to gain privileges via a Trojan horse executable file in the %SYSTEMDRIVE% directory, as demonstrated by program.exe.
Test IDs:	1.3.6.1.4.1.25623.1.0.805542
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2015-1484 BugTraq ID: 73925 http://www.securityfocus.com/bid/73925 http://www.securitytracker.com/id/1032133