Description
M4 Macro Library in Symantec Security Information Manager before 4.0.2.29 HOTFIX 1 allows local users to execute arbitrary commands via crafted "rule definitions", which produces dangerous Java code during M4 transformation.
References
- 20647 third-party-advisory
- ADV-2006-2334 vdb-entry
- 18420 vdb-entry
- 1016296 vdb-entry
- http://securityresponse.symantec.com/avcenter/security/Content/2006.06.13b.html
- symantec-sim-auth-bypass(27105) vdb-entry