CVE-2012-4350

Symantec Enterprise Security Manager (ESM) for Windows is affected by CVE-2012-4350 due to an unquoted search path in both the Manager and Agent components, enabling local privilege escalation. Public sources (OpenVAS/Nessus entries) confirm the issue affects Windows and provide remediation: upgr...

CVE-2007-2896

CVE-2007-2896 affects Symantec Enterprise Security Manager (ESM) 6.5.3 on Windows prior to 20070524. The issue is a race condition that allows remote attackers to cause denial of service via certain network scans directed at ESM ports, leading to CPU consumption and application hang. Descriptions...

CVE-2007-2375

The CVE-2007-2375 issue affects Symantec Enterprise Security Manager (ESM) prior to 20070405, where the agent remote upgrade interface does not verify the authenticity of upgrades. This allows remote attackers to execute arbitrary code through software implementing the agent upgrade protocol. The...

CVE-2006-4314

The CVE-2006-4314 entry concerns the Symantec Enterprise Security Manager (ESM) manager server (versions 6 and 6.5.x). A remote attacker can cause a denial of service (hang) by sending a malformed ESM agent request. The available documents confirm the affected product and the impact (DoS) but do ...