CVE-2006-3072

Published: Jun 19, 2006Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation.

Affected (30)

Products: Symantec: Security Information Manager

Symantec

1 product

Security Information Manager

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Symantec Security Information Manager	Version 4.0.2.10
Symantec Security Information Manager	Version 4.0.2.11
Symantec Security Information Manager	Version 4.0.2.12
Symantec Security Information Manager	Version 4.0.2.13
Symantec Security Information Manager	Version 4.0.2.14
Symantec Security Information Manager	Version 4.0.2.15
Symantec Security Information Manager	Version 4.0.2.16
Symantec Security Information Manager	Version 4.0.2.17
Symantec Security Information Manager	Version 4.0.2.18
Symantec Security Information Manager	Version 4.0.2.19
Symantec Security Information Manager	Version 4.0.2.1
Symantec Security Information Manager	Version 4.0.2.20
Symantec Security Information Manager	Version 4.0.2.21
Symantec Security Information Manager	Version 4.0.2.22
Symantec Security Information Manager	Version 4.0.2.23
Symantec Security Information Manager	Version 4.0.2.24
Symantec Security Information Manager	Version 4.0.2.25
Symantec Security Information Manager	Version 4.0.2.26
Symantec Security Information Manager	Version 4.0.2.27
Symantec Security Information Manager	Version 4.0.2.28
Symantec Security Information Manager	Version 4.0.2.29
Symantec Security Information Manager	Version 4.0.2.2
Symantec Security Information Manager	Version 4.0.2.3
Symantec Security Information Manager	Version 4.0.2.4
Symantec Security Information Manager	Version 4.0.2.5
Symantec Security Information Manager	Version 4.0.2.6
Symantec Security Information Manager	Version 4.0.2.7
Symantec Security Information Manager	Version 4.0.2.8
Symantec Security Information Manager	Version 4.0.2.9
Symantec Security Information Manager	Version 4.0.2