critical9.0Public exploit code
CVE-2014-7288
Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands v…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symantec Encryption Management Server < 3.2.0 MP6 - Remote Command Injection2015-01-30 · remote · windows · Verified
Impact
Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrators to execute arbitrary shell commands via a crafted command line in a database-backup restore action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Encryption Management Server | through 3.3.2 |
| Symantec | Pgp Universal Server | through 3.3.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/35949
- http://www.osvdb.org/117766
- http://www.securityfocus.com/bid/72308
- http://www.securitytracker.com/id/1031673
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150129_00
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100763
- http://www.exploit-db.com/exploits/35949
- http://www.osvdb.org/117766
- http://www.securityfocus.com/bid/72308
- http://www.securitytracker.com/id/1031673
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150129_00
- https://exchange.xforce.ibmcloud.com/vulnerabilities/100763