CVE-2008-0640

published 2008-02-08

CVE-2008-0640: Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
symantec	ghost_solutions_suite	—	—
symantec	ghost_solutions_suite	—	—
symantec	ghost_solutions_suite	—	—

CWE-287