CVE-2006-3072 M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code d...
MediumCVSS 4.6
EPSS 0.47%
- Published
- Updated
- Exploit status
- No public exploit known
Description
M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec security information manager | = 4.0.2 | No fix listed |
| symantec security information manager | = 4.0.2.1 | No fix listed |
| symantec security information manager | = 4.0.2.2 | No fix listed |
| symantec security information manager | = 4.0.2.3 | No fix listed |
| symantec security information manager | = 4.0.2.4 | No fix listed |
| symantec security information manager | = 4.0.2.5 | No fix listed |
| symantec security information manager | = 4.0.2.6 | No fix listed |
| symantec security information manager | = 4.0.2.7 | No fix listed |
| symantec security information manager | = 4.0.2.8 | No fix listed |
| symantec security information manager | = 4.0.2.9 | No fix listed |
| symantec security information manager | = 4.0.2.10 | No fix listed |
| symantec security information manager | = 4.0.2.11 | No fix listed |
| symantec security information manager | = 4.0.2.12 | No fix listed |
| symantec security information manager | = 4.0.2.13 | No fix listed |
| symantec security information manager | = 4.0.2.14 | No fix listed |
| symantec security information manager | = 4.0.2.15 | No fix listed |
| symantec security information manager | = 4.0.2.16 | No fix listed |
| symantec security information manager | = 4.0.2.17 | No fix listed |
| symantec security information manager | = 4.0.2.18 | No fix listed |
| symantec security information manager | = 4.0.2.19 | No fix listed |
| symantec security information manager | = 4.0.2.20 | No fix listed |
| symantec security information manager | = 4.0.2.21 | No fix listed |
| symantec security information manager | = 4.0.2.22 | No fix listed |
| symantec security information manager | = 4.0.2.23 | No fix listed |
| symantec security information manager | = 4.0.2.24 | No fix listed |
Show 5 more
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec security information manager | = 4.0.2.25 | No fix listed |
| symantec security information manager | = 4.0.2.26 | No fix listed |
| symantec security information manager | = 4.0.2.27 | No fix listed |
| symantec security information manager | = 4.0.2.28 | No fix listed |
| symantec security information manager | = 4.0.2.29 | No fix listed |
References
- 20647 patch third-party-advisory vendor-advisory
- securityresponse.symantec.com
- 1016296 patch vdb-entry
- 18420 vdb-entry
- ADV-2006-2334 vdb-entry
- symantec-sim-auth-bypass(27105) vdb-entry