PT-2008-2264 · Symantec · Symantec Ghost Solution Suite

Publicado 2008-02-08 · Atualizado 2011-07-25 · CVE-2008-0640

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Ghost Solution Suite versions 1.1 through 1.1 patch 1 Symantec Ghost Solution Suite version 2.0.0 Symantec Ghost Solution Suite version 2.0.1

Description The issue is related to a lack of authentication for connections between the console and the Ghost Management Agent. This allows remote attackers to execute arbitrary commands via unspecified RPC requests, potentially in conjunction with ARP spoofing.

Recommendations For Symantec Ghost Solution Suite versions 1.1 through 1.1 patch 1, apply patch 2 to resolve the issue. For Symantec Ghost Solution Suite version 2.0.0, update to a version that includes the necessary authentication for connections between the console and the Ghost Management Agent. For Symantec Ghost Solution Suite version 2.0.1, update to a version that includes the necessary authentication for connections between the console and the Ghost Management Agent. As a temporary workaround, consider restricting access to the RPC requests to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-0640

Produtos afetados

Symantec Ghost Solution Suite

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-0640 · Nota de Segurança
• http://securitytracker.com/id?1019356 · Nota
• http://vupen.com/english/advisories/2008/0474 · Aviso do Fabricante
• http://securityfocus.com/bid/27644 · Nota
• http://secunia.com/advisories/28853 · Aviso do Fabricante
• http://symantec.com/avcenter/security/Content/2008.02.07.html · Correção