Vulnerabilities > CVE-2006-3072 - Authentication Bypass vulnerability in Symantec Security Information Manager

CVSS 4.6 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

local

low complexity

symantec

NVD

Published: 2006-06-19

Updated: 2017-07-20

Summary

M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation.

Vulnerable Configurations

Part	Description	Count
Application	Symantec Symantec Security Information Manager 4.0.2 Symantec Security Information Manager 4.0.2.1 Symantec Security Information Manager 4.0.2.2 Symantec Security Information Manager 4.0.2.3 Symantec Security Information Manager 4.0.2.4 Symantec Security Information Manager 4.0.2.5 Symantec Security Information Manager 4.0.2.6 Symantec Security Information Manager 4.0.2.7 Symantec Security Information Manager 4.0.2.8 Symantec Security Information Manager 4.0.2.9 Symantec Security Information Manager 4.0.2.10 Symantec Security Information Manager 4.0.2.11 Symantec Security Information Manager 4.0.2.12 Symantec Security Information Manager 4.0.2.13 Symantec Security Information Manager 4.0.2.14 Symantec Security Information Manager 4.0.2.15 Symantec Security Information Manager 4.0.2.16 Symantec Security Information Manager 4.0.2.17 Symantec Security Information Manager 4.0.2.18 Symantec Security Information Manager 4.0.2.19 Symantec Security Information Manager 4.0.2.20 Symantec Security Information Manager 4.0.2.21 Symantec Security Information Manager 4.0.2.22 Symantec Security Information Manager 4.0.2.23 Symantec Security Information Manager 4.0.2.24 Symantec Security Information Manager 4.0.2.25 Symantec Security Information Manager 4.0.2.26 Symantec Security Information Manager 4.0.2.27 Symantec Security Information Manager 4.0.2.28 Symantec Security Information Manager 4.0.2.29	30

Summary

Vulnerable Configurations

References