CVE-2007-3095 Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV....
HighCVSS 9.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec client security | = 3.1 | No fix listed |
| symantec client security | = 3.1.394 | No fix listed |
| symantec client security | = 3.1.396 | No fix listed |
| symantec client security | = 3.1.400 | No fix listed |
| symantec client security | = 3.1.401 | No fix listed |
| symantec norton antivirus | = 10.0.2.2021 | No fix listed |
| symantec norton antivirus | = 10.1 | No fix listed |
| symantec norton antivirus | = 10.1.396 | No fix listed |
| symantec norton antivirus | = 10.1.400 | No fix listed |
| symantec norton antivirus | = 10.1.401 | No fix listed |
| symantec reporting server | <= 1.0.197.0 | No fix listed |
References
- 36107 vdb-entry
- 25543 third-party-advisory
- 24325 vdb-entry
- 1018196 vdb-entry
- www.symantec.com
- ADV-2007-2074 vdb-entry
- symantec-unspecified-authentication-bypass(34895) vdb-entry