Symantec Ghost Solutions Suite vulnerabilities

7 CVEs affecting Symantec Ghost Solutions Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-5689, published 2015-09-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-5689, published 2015-09-20. Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days. ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution (DS) before 7.6 HF4 12.0.0.7045 performs improper…
CVE-2012-0306, published 2012-10-18. Medium severity, CVSS 6.8. EPSS: 3.3% chance of exploitation in the next 30 days. Symantec Ghost Solution Suite 2.x through 2.5.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted backup file.
CVE-2008-0640, published 2008-02-08. High severity, CVSS 10.0. EPSS: 2.9% chance of exploitation in the next 30 days. Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost Management Agent, which allows remote attackers to execute…
CVE-2007-3132, published 2007-06-08. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in Symantec Ghost Solution Suite 2.0.0 and earlier, with Ghost 8.0.992 and possibly other versions, allow remote attackers to cause a denial of service (client or server…
CVE-2006-1286, published 2006-03-19. Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days. Buffer overflow in the login dialog in dbisqlc.exe in SQLAnywhere for Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, might allow local users to read certain…
CVE-2006-1284, published 2006-03-19. Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days. The installation of SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, includes a default administrator login account and password, which allows local…
CVE-2006-1285, published 2006-03-19. Low severity, CVSS 3.2. EPSS: 0.3% chance of exploitation in the next 30 days. SQLAnywhere in Symantec Ghost 8.0 and 8.2, as used in Symantec Ghost Solutions Suite (SGSS) 1.0, gives read and write permissions to all users for database shared memory sections, which allows local…