CVE-2008-0640

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-08 · updated 2026-06-16
Weakness: CWE-287

Description

Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute arbitrary commands via unspecified RPC requests in conjunction with ARP spoofing.

Affected products

Symantec Ghost Solutions Suite: 1.1, 2.0.0, 2.0.1

References

http://secunia.com/advisories/28853
http://www.securityfocus.com/bid/27644
http://www.securitytracker.com/id?1019356
http://www.symantec.com/avcenter/security/Content/2008.02.07.html
http://www.vupen.com/english/advisories/2008/0474
http://secunia.com/advisories/28853
http://www.securityfocus.com/bid/27644
http://www.securitytracker.com/id?1019356
http://www.symantec.com/avcenter/security/Content/2008.02.07.html
http://www.vupen.com/english/advisories/2008/0474

Get alerted when CVE-2008-0640 or the next vulnerability affects your stack