NVD

Id
54542  
Name
CVE-2007-2375  
Description
The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-04-30  
Modified Date
2011-03-07  
Seq
2007-2375  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276602 54542 CVE-2007-2375 23287  View
276603 54542 CVE-2007-2375 1017881  View
276604 54542 CVE-2007-2375 http://www.symantec.com/avcenter/security/Content/2007.04.05d.html  View
276605 54542 CVE-2007-2375 ADV-2007-1277  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56793 JVNDB-2007-005485 Symantec ESM のエージェントリモート更新インターフェースにおける任意のコードを実行される脆弱性 Symantec Enterprise Security Manager (ESM) のエージェントリモート更新インターフェースは、更新の真正性を検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2007-2375 25730 CVE-2007-2375 54542 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005485.html 2007-04-05 2012-12-20 View