PT-2011-2563 · Symantec · Symantec Antivirus Corporate Edition+3

Publicado 2011-01-31 · Atualizado 2017-08-17 · CVE-2011-0688

NVD

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111. NOTE: some of these details are obtained from third party information.

Correção

RCE

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2011-0688

Produtos afetados

Symantec Antivirus Corporate Edition

Anti-Virus

Antivirus Central Quarantine Server

System Center

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2011-0688 · Nota de Segurança
• http://securityfocus.com/bid/45936 · Nota
• http://xforce.iss.net/xforce/xfdb/65071 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65071 · Nota
• http://secunia.com/advisories/43099 · Aviso do Fabricante
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00 · Nota
• http://vupen.com/english/advisories/2011/0234 · Aviso do Fabricante
• http://securitytracker.com/id?1024996 · Nota