CVE-2007-2375

The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.

Link	Resource
http://www.symantec.com/avcenter/security/Content/2007.04.05d.html	Vendor Advisory
http://www.securityfocus.com/bid/23287
http://secunia.com/advisories/24767	Patch Vendor Advisory
http://www.securitytracker.com/id?1017881
http://www.vupen.com/english/advisories/2007/1277

Configuration 1

cpe:2.3:a:symantec:enterprise_security_manager:6.5.2:*:*:*:*:*:*:* cpe:2.3:a:symantec:enterprise_security_manager:5.5.3:*:*:*:*:*:*:* cpe:2.3:a:symantec:enterprise_security_manager:6.0:*:*:*:*:*:*:* cpe:2.3:a:symantec:enterprise_security_manager:6.5.1:*:*:*:*:*:*:* cpe:2.3:a:symantec:enterprise_security_manager:6.5:*:*:*:*:*:*:*

---

Published : 2007-04-30 11:19

Updated : 2011-03-08 02:54

---

NVD link : CVE-2007-2375

Mitre link : CVE-2007-2375

No products.

NVD-CWE-Other