Secunia

Three vulnerabilities have been reported in Symantec Reporting Server, which can be exploited by malicious people to gain knowledge of sensitive information, bypass certain security restrictions, or manipulate certain files.

1) A certain file that is created when exporting data from the Reporting Server can be manipulated to create and execute a malicious file instead.

2) An unspecified error during a failed login attempt can be exploited to reveal a hashed version of the password.

3) Unspecified errors within the SCS Reporting Server can be exploited to disable and bypass the authentication mechanism.

The vulnerabilities reportedly affect version 1.0.197.0.

Solution
Update to version 1.0.224.0.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits:
1) Ertunga Arsal, Tech Data GmbH & Co. OHG
2) Mikko Korppi

Changelog
Further details available in Customer Area

Original Advisory
Symantec:
http://securityresponse.symantec.com/avcenter/security/Content/2007.06.05.html
http://securityresponse.symantec.com/avcenter/security/Content/2007.06.05a.html

Deep Links
Links available in Customer Area