CVE-2008-0640: Critical severity symantec ghost solution suite vulnerability
Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0640?
CVE-2008-0640 is considered a high severity vulnerability due to its potential for remote command execution.
How do I fix CVE-2008-0640?
To fix CVE-2008-0640, upgrade to Symantec Ghost Solution Suite version 1.1 patch 2 or later, or to version 2.0.0 or 2.0.1.
What type of attack does CVE-2008-0640 enable?
CVE-2008-0640 enables remote attackers to execute arbitrary commands through unspecified RPC requests.
Which versions of Symantec Ghost Solution Suite are affected by CVE-2008-0640?
CVE-2008-0640 affects Symantec Ghost Solution Suite versions 1.1 before patch 2, 2.0.0, and 2.0.1.
What is the cause of CVE-2008-0640?
The cause of CVE-2008-0640 is the lack of authentication for connections between the console and the Ghost Management Agent.