NVD

Id
614  
Name
CVE-2008-0640  
Description
Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-02-07  
Modified Date
2011-07-25  
Seq
2008-0640  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
4079 614 CVE-2008-0640 27644  View
4080 614 CVE-2008-0640 1019356  View
4081 614 CVE-2008-0640 http://www.symantec.com/avcenter/security/Content/2008.02.07.html  View
4082 614 CVE-2008-0640 ADV-2008-0474  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50135 JVNDB-2008-005445 Symantec Ghost Solution Suite における任意のコマンドを実行される脆弱性 Symantec Ghost Solution Suite は、コンソールと Ghost Management Agent 間の接続の真正性を確認しないため、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-0640 30753 CVE-2008-0640 614 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005445.html 2008-02-07 2012-12-20 View