CVE-2007-2375 The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code v...
HighCVSS 10.0
EPSS 5.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec enterprise security manager | = 5.5.3 | No fix listed |
| symantec enterprise security manager | = 6.0 | No fix listed |
| symantec enterprise security manager | = 6.5 | No fix listed |
| symantec enterprise security manager | = 6.5.1 | No fix listed |
| symantec enterprise security manager | = 6.5.2 | No fix listed |
References
- 24767 patch third-party-advisory vendor-advisory
- 23287 vdb-entry
- 1017881 vdb-entry
- www.symantec.com vendor-advisory
- ADV-2007-1277 vdb-entry