CVE-2007-2375 Information

Description

The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol.

Reference

http://secunia.com/advisories/24767 http://www.securityfocus.com/bid/23287 http://www.securitytracker.com/id?1017881 http://www.symantec.com/avcenter/security/Content/2007.04.05d.html http://www.vupen.com/english/advisories/2007/1277