Symantec Enterprise Security Manager Denial of Service Vulnerability

Bugtraq ID:	19580
Class:	Race Condition Error
CVE:	CVE-2006-4314
Remote:	Yes
Local:	No
Published:	Aug 18 2006 12:00AM
Updated:	Jun 27 2007 06:28PM
Credit:	Anthony Bettini of McAfee, Inc. discovered this issue.
Vulnerable:	Symantec Enterprise Security Manager 6.5.2 Symantec Enterprise Security Manager 6.5.1 Symantec Enterprise Security Manager 6.5 Symantec Enterprise Security Manager 6.0
Not Vulnerable:

Symantec Enterprise Security Manager Denial of Service Vulnerability

Symantec Enterprise Security Manager is prone to a denial-of-service vulnerability; fixes are available.

Symantec Enterprise Security Manager is prone to a race condition that can cause the application to lock up, resulting in a denial of service.

ESM Agent and Manager Platforms 6.0-6.5x are affected by this vulnerability.

Symantec Enterprise Security Manager Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Symantec Enterprise Security Manager Denial of Service Vulnerability

Solution:
Symantec has released downloadable automated and manual fixes for many supported ESM managers and agents. Please see the referenced advisory for more information.

Symantec Enterprise Security Manager Denial of Service Vulnerability

References:

• SYM06-016 - Symantec Enterprise Security Manager Denial-of-Service (Symantec)
  
• Symantec Enterprise Security Manager Product Page (Symantec)
  
• Symantec Enterprise Security Manager Denial-of-Service Vulnerability ([email protected])