What is the severity of CVE-2007-2375?

CVE-2007-2375 is considered a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2007-2375?

To fix CVE-2007-2375, upgrade Symantec Enterprise Security Manager to version 6.5.3 or later.

What versions of Symantec Enterprise Security Manager are affected by CVE-2007-2375?

CVE-2007-2375 affects versions 5.5.3, 6.0, 6.5, 6.5.1, and 6.5.2 of Symantec Enterprise Security Manager.

What type of attack does CVE-2007-2375 facilitate?

CVE-2007-2375 allows remote attackers to execute arbitrary code through unauthenticated agent upgrades.

Is CVE-2007-2375 exploitable from the internet?

Yes, CVE-2007-2375 can be exploited by remote attackers over the internet if the affected system is improperly secured.

Vulnerability/
CVE-2007-2375

critical

CWE

NVD-CWE-Other

30/4/2007

7/8/2024

CVE-2007-2375

First published: Mon Apr 30 2007(Updated: )

The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Symantec Enterprise Security Manager	=6.5.2
Symantec Enterprise Security Manager	=5.5.3
Symantec Enterprise Security Manager	=6.0
Symantec Enterprise Security Manager	=6.5.1
Symantec Enterprise Security Manager	=6.5

Remedy

http://secunia.com/advisories/24767

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2007-2375?
CVE-2007-2375 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2007-2375?
To fix CVE-2007-2375, upgrade Symantec Enterprise Security Manager to version 6.5.3 or later.
What versions of Symantec Enterprise Security Manager are affected by CVE-2007-2375?
CVE-2007-2375 affects versions 5.5.3, 6.0, 6.5, 6.5.1, and 6.5.2 of Symantec Enterprise Security Manager.
What type of attack does CVE-2007-2375 facilitate?
CVE-2007-2375 allows remote attackers to execute arbitrary code through unauthenticated agent upgrades.
Is CVE-2007-2375 exploitable from the internet?
Yes, CVE-2007-2375 can be exploited by remote attackers over the internet if the affected system is improperly secured.

collector/nvd-historical
collector/nvd-index
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/references
agent/remedy
agent/author
agent/last-modified-date
agent/weakness
agent/tags
agent/first-publish-date
agent/description
agent/event
agent/source
vendor/symantec
canonical/symantec enterprise security manager
version/symantec enterprise security manager/6.5.2
version/symantec enterprise security manager/5.5.3
version/symantec enterprise security manager/6.0
version/symantec enterprise security manager/6.5.1
version/symantec enterprise security manager/6.5

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.