{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-04-05T00:00:00", "descriptions": [{"lang": "en", "value": "The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2007-05-22T09:00:00", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "23287", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/23287"}, {"name": "1017881", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1017881"}, {"name": "ADV-2007-1277", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/1277"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.symantec.com/avcenter/security/Content/2007.04.05d.html"}, {"name": "24767", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/24767"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-2375", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "23287", "refsource": "BID", "url": "http://www.securityfocus.com/bid/23287"}, {"name": "1017881", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1017881"}, {"name": "ADV-2007-1277", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/1277"}, {"name": "http://www.symantec.com/avcenter/security/Content/2007.04.05d.html", "refsource": "CONFIRM", "url": "http://www.symantec.com/avcenter/security/Content/2007.04.05d.html"}, {"name": "24767", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/24767"}]}}}}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-2375", "datePublished": "2007-04-30T23:00:00", "dateReserved": "2007-04-30T00:00:00", "dateUpdated": "2007-05-22T09:00:00", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:symantec:enterprise_security_manager:5.5.3:*:*:*:*:*:*:*", "matchCriteriaId": "2D54B02D-2EEC-4057-9DC9-4D34DFCBB8FA", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:enterprise_security_manager:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "D7D3219F-1AC4-4ED6-ACE0-CB33A104F484", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:enterprise_security_manager:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "5296D33B-5F71-4DE3-B5CD-9328F091CEA9", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:enterprise_security_manager:6.5.1:*:*:*:*:*:*:*", "matchCriteriaId": "8D5C43D9-37D5-4981-87EF-BE7FAB2D1531", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:enterprise_security_manager:6.5.2:*:*:*:*:*:*:*", "matchCriteriaId": "9BC1C6DE-0C86-4A16-A432-3AB93AC1A754", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the authenticity of upgrades, which allows remote attackers to execute arbitrary code via software that implements the agent upgrade protocol."}, {"lang": "es", "value": "El agente remoto de la interfaz de actualizaci\u00f3n en Symantec Enterprise Security Manager (ESM) anterior a 20070405 no verifica la autenticidad de las actualizaciones, lo cual permite a un atacante remoto ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de software que implemente el agente del protocolo de actualizaci\u00f3n."}], "id": "CVE-2007-2375", "lastModified": "2011-03-08T02:54:06.517", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-04-30T23:19:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://secunia.com/advisories/24767"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/23287"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1017881"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://www.symantec.com/avcenter/security/Content/2007.04.05d.html"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/1277"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}