This isn’t major but, I know a few of our readers use this product.
“Description:
A vulnerability has been reported in Symantec Enterprise Security Manager (ESM), which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to a race condition when processing certain requests. This can be exploited by sending a specially crafted, invalid request to the manager service to simulate an ESM agent.
Successful exploitation causes both the ESM agent and ESM manager to stop responding.
The vulnerability has been reported in versions 6.0 through 6.5.x. Prior versions may also be affected.
Solution:
Apply patch (see vendor advisories for details).”
Tags: Symantec, Denial of Service, DoS, Vulnerability
