CVEvulnerability

CVE-2006-3072

4.6 MEDIUM Published 2006-06-19 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-06-19
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation.

Affected configurations

• symantec security information manager 4.0.2 • symantec security information manager 4.0.2.1 • symantec security information manager 4.0.2.2 • symantec security information manager 4.0.2.3 • symantec security information manager 4.0.2.4 • symantec security information manager 4.0.2.5 • symantec security information manager 4.0.2.6 • symantec security information manager 4.0.2.7 • symantec security information manager 4.0.2.8 • symantec security information manager 4.0.2.9 • symantec security information manager 4.0.2.10 • symantec security information manager 4.0.2.11 • symantec security information manager 4.0.2.12 • symantec security information manager 4.0.2.13 • symantec security information manager 4.0.2.14 • symantec security information manager 4.0.2.15 • symantec security information manager 4.0.2.16 • symantec security information manager 4.0.2.17 • symantec security information manager 4.0.2.18 • symantec security information manager 4.0.2.19 • symantec security information manager 4.0.2.20 • symantec security information manager 4.0.2.21 • symantec security information manager 4.0.2.22 • symantec security information manager 4.0.2.23 • symantec security information manager 4.0.2.24 • symantec security information manager 4.0.2.25 • symantec security information manager 4.0.2.26 • symantec security information manager 4.0.2.27 • symantec security information manager 4.0.2.28 • symantec security information manager 4.0.2.29

References