Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

Symantec ESM can run code from fake remote upgrade

CVE-2007-2375 · published 19 years ago
Summary

Versions of Symantec Enterprise Security Manager released before April 5, 2007 accept upgrade files without checking that they are genuine. An attacker on the network could send a forged upgrade and cause the system to run any code they choose. Update to a newer version of the product as soon as possible to obtain the authentication fix.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
symantec enterprise_security_manager 5.5.3
6.0
6.5
6.5.1
6.5.2
cpe:2.3:a:symantec:enterprise_security_manager:5.5.3:*:*:*:*:*:*:*
Original advisory text
The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary cod...
The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
5% chance of attack within 30 days
Timeline
Published30 Apr 2007
Updated22 Oct 2026
First seen29 Sep 2026
Sources
CVE-2007-2375 · NVD
Track software like this
Free during beta