CVE-2007-2375: Critical severity Symantec Enterprise Security Manager vulnerability
The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2375?
CVE-2007-2375 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-2375?
To fix CVE-2007-2375, upgrade Symantec Enterprise Security Manager to version 6.5.3 or later.
What versions of Symantec Enterprise Security Manager are affected by CVE-2007-2375?
CVE-2007-2375 affects versions 5.5.3, 6.0, 6.5, 6.5.1, and 6.5.2 of Symantec Enterprise Security Manager.
What type of attack does CVE-2007-2375 facilitate?
CVE-2007-2375 allows remote attackers to execute arbitrary code through unauthenticated agent upgrades.
Is CVE-2007-2375 exploitable from the internet?
Yes, CVE-2007-2375 can be exploited by remote attackers over the internet if the affected system is improperly secured.