[VIM] [CVENEW] New CVE CANs: 2013/03/26 10:00 ; count=2

[coley at mitre.org]

======================================================
Name: CVE-2013-1608
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1608
Final-Decision: 
Interim-Decision: 
Modified: 
Proposed: 
Assigned: 20130204
Category: 
Reference: CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130320_00
Reference: BID:58542
Reference: URL:http://www.securityfocus.com/bid/58542

Directory traversal vulnerability in the Management Console on the
Symantec NetBackup (NBU) appliance 2.0.x allows remote attackers to
read arbitrary files via unspecified vectors.



======================================================
Name: CVE-2013-1609
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1609
Final-Decision: 
Interim-Decision: 
Modified: 
Proposed: 
Assigned: 20130204
Category: 
Reference: CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20130321_00
Reference: BID:58617
Reference: URL:http://www.securityfocus.com/bid/58617

Multiple unquoted Windows search path vulnerabilities in the (1) File
Collector and (2) File PlaceHolder services in Symantec Enterprise
Vault (EV) for File System Archiving before 9.0.4 and 10.x before
10.0.1 allow local users to gain privileges via a Trojan horse
program.