A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protector Agent 3.4.5586.9772, which could let a local malicious user obtain privileges.
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/56740 | vdb entry third party advisory |
https://seclists.org/bugtraq/2012/Nov/108 | mailing list exploit third party advisory |
https://packetstormsecurity.com/files/cve/CVE-2012-4760 | vdb entry third party advisory |