PT-2010-1241 · Symantec · Symantec Workspace Streaming+1

Publicado 2010-06-17 · Atualizado 2017-08-08 · CVE-2008-4389

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec AppStream versions 5.2.x Symantec Workspace Streaming (SWS) versions 6.1.x through 6.1 SP3

Description The issue concerns improper authentication, allowing remote Workspace Streaming servers and man-in-the-middle attackers to download arbitrary executable files onto a client system and execute them.

Recommendations For Symantec AppStream version 5.2.x, update to a version that properly performs authentication. For Symantec Workspace Streaming (SWS) versions 6.1.x through 6.1 SP3, update to version 6.1 SP4 or later to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-4389

Produtos afetados

Symantec Appstream

Symantec Workspace Streaming

Referências · 7

• http://securityfocus.com/bid/40611 · Nota
• http://kb.cert.org/vuls/id/221257 · Nota
• http://secunia.com/advisories/40233 · Nota
• http://vupen.com/english/advisories/2010/1511 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-4389 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59504 · Nota
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100616_00 · Nota