A vulnerability has been reported in Symantec Enterprise Security Manager (ESM), which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a race condition when processing certain requests. This can be exploited by sending a specially crafted, invalid request to the manager service to simulate an ESM agent.

Successful exploitation causes both the ESM agent and ESM manager to stop responding.

The vulnerability has been reported in versions 6.0 through 6.5.x. Prior versions may also be affected.

Solution
Apply patch (see vendor advisories for details).

Provided and/or discovered by
The vendor credits Anthony Bettini, McAfee.

Changelog
Further details available in Customer Area

Original Advisory
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2006.08.21a.html
http://securityresponse.symantec.com/avcenter/security/Content/2006.08.21c.html

Deep Links
Links available in Customer Area