CVE-2007-2896

Severity Score

4.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Race condition in the Symantec Enterprise Security Manager (ESM) 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service (CPU consumption and application hang) via certain network scans to ESM ports.

Condición de carrera en los encargados y agentes de Symantec Enterprise Security Manager (ESM) 6.5.3 en Windows anteriores a la fecha 24/05/2007 permite a atacantes remotos causar una denegación de servicio (agotamiento de la CPU y cuelgue de aplicación) a través de determinados escaneos de red a los puertos ESM.

*Credits: N/A

CVSS Scores

NISTv2 4.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

None

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-05-29 CVE Reserved
2007-05-30 CVE Published
2024-07-25 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (8)

URL	Tag	Source
http://osvdb.org/35077	Vdb Entry
http://www.securityfocus.com/bid/24123	Vdb Entry
http://www.securitytracker.com/id?1018120	Vdb Entry
http://www.vupen.com/english/advisories/2007/1940	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34507	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/25390	2017-07-29
http://securityresponse.symantec.com/avcenter/security/Content/2007.05.24a.html	2017-07-29
http://securityresponse.symantec.com/avcenter/security/Content/2007.05.24b.html	2017-07-29

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Symantec Search vendor "Symantec"	Enterprise Security Manager Search vendor "Symantec" for product "Enterprise Security Manager"	6.5.3 Search vendor "Symantec" for product "Enterprise Security Manager" and version "6.5.3"	-	Affected	in	Microsoft Search vendor "Microsoft"	All Windows Search vendor "Microsoft" for product "All Windows"	*	-	Safe