CVE:CVE-2006-3072
CNNVD:CNNVD-200606-352
Symantec Security Information Manager 4.0.2.29 HOTFIX 1之前版本中的M4 Macro Library可以使本地用户借助可在M4 转换过程中产生危险Java代码的特制"规则定义", 执行任意命令。
solution:Upgrade symantec security_information_manager to a higher version than 4.0.2,4.0.2.1,4.0.2.2,4.0.2.3,4.0.2.4,4.0.2.5,4.0.2.6,4.0.2.7,4.0.2.8,4.0.2.9,4.0.2.10,4.0.2.11,4.0.2.12,4.0.2.13,4.0.2.14,4.0.2.15,4.0.2.16,4.0.2.17,4.0.2.18,4.0.2.19,4.0.2.20,4.0.2.21,4.0.2.22,4.0.2.23,4.0.2.24,4.0.2.25,4.0.2.26,4.0.2.27,4.0.2.28,4.0.2.29,and avoid the version 4.0.2,4.0.2.1,4.0.2.2,4.0.2.3,4.0.2.4,4.0.2.5,4.0.2.6,4.0.2.7,4.0.2.8,4.0.2.9,4.0.2.10,4.0.2.11,4.0.2.12,4.0.2.13,4.0.2.14,4.0.2.15,4.0.2.16,4.0.2.17,4.0.2.18,4.0.2.19,4.0.2.20,4.0.2.21,4.0.2.22,4.0.2.23,4.0.2.24,4.0.2.25,4.0.2.26,4.0.2.27,4.0.2.28,4.0.2.29