CVE-2007-2375 in Enterprise Security Manager

Sumário

de MITRE

The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 30/04/2007
• Divulgação: 30/04/2007
• Moderação: aceite
• Entrada: VDB-36516
• CPE: pronto
• CWE: CWE-119 (confirmado)
• CVSS: 10.0 (NVD)
• EPSS: 0.08980
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2375
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2375
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2375/