CVEvulnerability
CVE-2006-3072
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-06-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation.
Affected configurations
• symantec security information manager 4.0.2
• symantec security information manager 4.0.2.1
• symantec security information manager 4.0.2.2
• symantec security information manager 4.0.2.3
• symantec security information manager 4.0.2.4
• symantec security information manager 4.0.2.5
• symantec security information manager 4.0.2.6
• symantec security information manager 4.0.2.7
• symantec security information manager 4.0.2.8
• symantec security information manager 4.0.2.9
• symantec security information manager 4.0.2.10
• symantec security information manager 4.0.2.11
• symantec security information manager 4.0.2.12
• symantec security information manager 4.0.2.13
• symantec security information manager 4.0.2.14
• symantec security information manager 4.0.2.15
• symantec security information manager 4.0.2.16
• symantec security information manager 4.0.2.17
• symantec security information manager 4.0.2.18
• symantec security information manager 4.0.2.19
• symantec security information manager 4.0.2.20
• symantec security information manager 4.0.2.21
• symantec security information manager 4.0.2.22
• symantec security information manager 4.0.2.23
• symantec security information manager 4.0.2.24
• symantec security information manager 4.0.2.25
• symantec security information manager 4.0.2.26
• symantec security information manager 4.0.2.27
• symantec security information manager 4.0.2.28
• symantec security information manager 4.0.2.29
References
- http://secunia.com/advisories/20647 Patch, Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2006.06.13b.html securityresponse.symantec.com
- http://securitytracker.com/id?1016296 Patch
- http://www.securityfocus.com/bid/18420 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2334 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27105 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/20647 Patch, Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2006.06.13b.html securityresponse.symantec.com
- http://securitytracker.com/id?1016296 Patch
- http://www.securityfocus.com/bid/18420 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/2334 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27105 exchange.xforce.ibmcloud.com