First published: Wed Jun 06 2007(Updated: )
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3.1 and later, and Symantec AntiVirus Corporate Edition (SAV CE) 10.1 and later, allows attackers to "disable the authentication system" and bypass authentication via unknown vectors.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Symantec Client Security | =3.1 | |
Symantec Client Security | =3.1.394 | |
Symantec Client Security | =3.1.396 | |
Symantec Client Security | =3.1.400 | |
Symantec Client Security | =3.1.401 | |
Symantec Norton Antivirus with Backup | =10.0.2.2021 | |
Symantec Norton Antivirus with Backup | =10.1 | |
Symantec Norton Antivirus with Backup | =10.1.396 | |
Symantec Norton Antivirus with Backup | =10.1.400 | |
Symantec Norton Antivirus with Backup | =10.1.401 | |
Symantec Reporting Server | <=1.0.197.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2007-3095 is classified as a vulnerability that allows attackers to disable the authentication system.
CVE-2007-3095 affects Symantec Reporting Server versions up to 1.0.197.0 and various versions of Symantec Client Security and Norton Antivirus that precede 1.0.224.0 and 10.1 respectively.
To mitigate CVE-2007-3095, update to the latest versions of Symantec Reporting Server and the affected Symantec Client Security or Norton Antivirus products.
CVE-2007-3095 can allow attackers to bypass authentication, potentially leading to unauthorized access and control over the affected systems.
There are no specific workarounds for CVE-2007-3095; updating the affected software is the recommended approach.