PT-2009-3935 · Symantec · Symantec Reporting Server+6

Published 2009-04-30 · Updated 2019-07-26 · CVE-2009-1432

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Symantec Reporting Server versions prior to 10.1 MR8 Symantec AntiVirus (SAV) Corporate Edition versions prior to 10.1 MR8 Symantec AntiVirus (SAV) Corporate Edition versions prior to 10.2 MR2 Symantec Client Security (SCS) versions prior to 3.1 MR8 Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) versions prior to 11.0 MR2

Description The issue allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.

Recommendations For Symantec Reporting Server versions prior to 10.1 MR8, update to version 10.1 MR8 or later. For Symantec AntiVirus (SAV) Corporate Edition versions prior to 10.1 MR8, update to version 10.1 MR8 or later. For Symantec AntiVirus (SAV) Corporate Edition versions prior to 10.2 MR2, update to version 10.2 MR2 or later. For Symantec Client Security (SCS) versions prior to 3.1 MR8, update to version 3.1 MR8 or later. For Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) versions prior to 11.0 MR2, update to version 11.0 MR2 or later.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2009-1432

Affected Products

Symantec Antivirus

Symantec Antivirus Corporate Edition

Symantec Client Security

Symantec Endpoint Protection

Symantec Endpoint Protection Client

Symantec Endpoint Protection Manager

Symantec Reporting Server

References · 13

• https://nvd.nist.gov/vuln/detail/CVE-2009-1432 · Security Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00 · Vendor Advisory
• http://secunia.com/advisories/34935 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1432 · Note
• http://securityfocus.com/bid/34668 · Note
• http://securitytracker.com/id?1022138 · Note
• http://securitytracker.com/id?1022137 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50172 · Note
• http://securitytracker.com/id?1022136 · Note
• http://vupen.com/english/advisories/2009/1204 · Note
• http://secunia.com/advisories/34856 · Note
• http://vupen.com/english/advisories/2009/1202 · Note
• http://xforce.iss.net/xforce/xfdb/50172 · Note