CVE-2007-2375

The CVE-2007-2375 issue affects Symantec Enterprise Security Manager (ESM) prior to 20070405, where the agent remote upgrade interface does not verify the authenticity of upgrades. This allows remote attackers to execute arbitrary code through software implementing the agent upgrade protocol. The...

Symantec Enterprise Security Manager Remote Upgrade Authentication Bypass

SUMMARY Symantec Enterprise Security Manager is susceptible to a remote code execution vulnerability. Severity High Remote | Yes ---|--- Local Access | Yes Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Vulnerable Products The following supported ESM agent and...

CVE-2007-0667

The redirect function in Form.pm for 1 LedgerSMB before 1.1.5 and 2 SQL-Ledger allows remote authenticated users to execute arbitrary code via redirects, related to callbacks, a different issue than CVE-2006-5872...

CVE-2006-4314

The manager server in Symantec Enterprise Security Manager ESM 6 and 6.5.x allows remote attackers to cause a denial of service hang via a malformed ESM agent request...

CVE-2006-4314

The CVE-2006-4314 entry concerns the Symantec Enterprise Security Manager (ESM) manager server (versions 6 and 6.5.x). A remote attacker can cause a denial of service (hang) by sending a malformed ESM agent request. The available documents confirm the affected product and the impact (DoS) but do ...

CVE-2006-4314

The manager server in Symantec Enterprise Security Manager ESM 6 and 6.5.x allows remote attackers to cause a denial of service hang via a malformed ESM agent request...

Symantec Enterprise Security Manager Denial-of-Service Vulnerability

McAfee, Inc. McAfee® Avert® Labs Security Advisory Public Release Date: 2006-08-22 Symantec Enterprise Security Manager Denial-of-Service Vulnerability CVE Number Pending • Synopsis The Symantec Enterprise Security Manager ESM platform and agent are susceptible to a race condition that can cause...

Symantec Enterprise Security Manager Denial-of-Service

SUMMARY Symantec Enterprise Security Manager is susceptible to a race condition that can cause the application to lock up, resulting in a denial-of-service. Risk Impact Medium Remote | Yes ---|--- Local | No Authentication Required | No Exploit publicly available | No AFFECTED PRODUCTS Vulnerable...

CVE-2004-1345

The CVE refers to Sun StorEdge Enterprise Storage Manager (ESM) 2.1 on Solaris 8/9 with an unknown vulnerability that allows local users granted the ESMUser role to escalate to root. The existing sources describe the vulnerability impact as local privilege escalation but do not provide concrete t...