CVE-2007-2375

Publicada em 30 abr 2007 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 5.4%

The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.

Produtos afetados

n/a · n/a

Referências

http://secunia.com/advisories/24767 http://www.securityfocus.com/bid/23287 http://www.securitytracker.com/id?1017881 http://www.symantec.com/avcenter/security/Content/2007.04.05d.html http://www.vupen.com/english/advisories/2007/1277