Upgrade SEPM and Clients to Correct New Vulnerabilities (CVE-2013-5009, CVE-2013-5010, CVE-2013-5011)

Symantc has just posted the following notice:

Symantec Endpoint Protection Privilege Assumption, Policy Bypass, Local Elevation of Privilege
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20140109_00

Affected Products

 

 

Product	Version	Build	Solution(s)
Symantec Endpoint Protection	11.x	All	Upgrade to SEP 11.0.7.4 or the latest release of SEP 12.1.x
Symantec Endpoint Protection Small Business Edition	12.0	All	Upgrade to latest release of SEP 12.1.x
Symantec Endpoint Protection	12.1.x	All prior to 12.1.2 (RU2)	Upgrade to latest release of SEP 12.1.x

Though Symantec is not aware of any malware or attacks which exploit these vulnerabilities at this time, please do ensure that your organization is upgraded to the latest releases (12.1.4 or 11.0.7.4) to remain invulnerable and to avail of the many other enhancements, improvements and fixes.