CVE-2008-0640 | BDVDB-2026-29099 Detail

Description#

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/28853
http://www.vupen.com/english/advisories/2008/0474
http://www.securitytracker.com/id?1019356
http://www.securityfocus.com/bid/27644
http://www.symantec.com/avcenter/security/Content/2008.02.07.html

Exploit#

No public exploit known

History#

Version 12008-02-08Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.