CVEvulnerability
CVE-2008-0640
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.
Affected configurations
• symantec ghost solutions suite 1.1
• symantec ghost solutions suite 2.0.0
• symantec ghost solutions suite 2.0.1
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://secunia.com/advisories/28853 Vendor Advisory
- http://www.securityfocus.com/bid/27644 www.securityfocus.com
- http://www.securitytracker.com/id?1019356 www.securitytracker.com
- http://www.symantec.com/avcenter/security/Content/2008.02.07.html Patch
- http://www.vupen.com/english/advisories/2008/0474 Vendor Advisory
- http://secunia.com/advisories/28853 Vendor Advisory
- http://www.securityfocus.com/bid/27644 www.securityfocus.com
- http://www.securitytracker.com/id?1019356 www.securitytracker.com
- http://www.symantec.com/avcenter/security/Content/2008.02.07.html Patch
- http://www.vupen.com/english/advisories/2008/0474 Vendor Advisory