PT-2008-2264 · Symantec · Symantec Ghost Solution Suite

Published 2008-02-08 · Updated 2011-07-25 · CVE-2008-0640

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Ghost Solution Suite versions 1.1 through 1.1 patch 1 Symantec Ghost Solution Suite version 2.0.0 Symantec Ghost Solution Suite version 2.0.1

Description The issue is related to a lack of authentication for connections between the console and the Ghost Management Agent. This allows remote attackers to execute arbitrary commands via unspecified RPC requests, potentially in conjunction with ARP spoofing.

Recommendations For Symantec Ghost Solution Suite versions 1.1 through 1.1 patch 1, apply patch 2 to resolve the issue. For Symantec Ghost Solution Suite version 2.0.0, update to a version that includes the necessary authentication for connections between the console and the Ghost Management Agent. For Symantec Ghost Solution Suite version 2.0.1, update to a version that includes the necessary authentication for connections between the console and the Ghost Management Agent. As a temporary workaround, consider restricting access to the RPC requests to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-0640

Affected Products

Symantec Ghost Solution Suite

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2008-0640 · Security Note
• http://vupen.com/english/advisories/2008/0474 · Vendor Advisory
• http://secunia.com/advisories/28853 · Vendor Advisory
• http://symantec.com/avcenter/security/Content/2008.02.07.html · Patch
• http://securitytracker.com/id?1019356 · Note
• http://securityfocus.com/bid/27644 · Note