PT-2010-1241 · Symantec · Symantec Workspace Streaming+1

Published 2010-06-17 · Updated 2017-08-08 · CVE-2008-4389

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec AppStream versions 5.2.x Symantec Workspace Streaming (SWS) versions 6.1.x through 6.1 SP3

Description The issue concerns improper authentication, allowing remote Workspace Streaming servers and man-in-the-middle attackers to download arbitrary executable files onto a client system and execute them.

Recommendations For Symantec AppStream version 5.2.x, update to a version that properly performs authentication. For Symantec Workspace Streaming (SWS) versions 6.1.x through 6.1 SP3, update to version 6.1 SP4 or later to resolve the issue.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-4389

Affected Products

Symantec Appstream

Symantec Workspace Streaming

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-4389 · Security Note
• http://securityfocus.com/bid/40611 · Note
• http://kb.cert.org/vuls/id/221257 · Note
• http://secunia.com/advisories/40233 · Note
• http://vupen.com/english/advisories/2010/1511 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59504 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100616_00 · Note