CVE-2007-2375 | BDVDB-2026-23866 Detail

Description#

The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/23287
http://www.securitytracker.com/id?1017881
http://www.vupen.com/english/advisories/2007/1277
http://www.symantec.com/avcenter/security/Content/2007.04.05d.html
http://secunia.com/advisories/24767

Exploit#

No public exploit known

History#

Version 12007-04-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.