CVE

Id
40464  
CVE No.
CVE-2009-3029  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the console in Symantec SecurityExpressions Audit and Compliance Server 4.1.1, 4.1, and earlier allows remote authenticated users to inject arbitrary web script or HTML via "external client input" that triggers crafted error messages.  
Phase
Assigned (20090831)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
444559 40464 CVE-2009-3029 CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091006_00  View
444560 40464 CVE-2009-3029 BID:36570  View
444561 40464 CVE-2009-3029 URL:http://www.securityfocus.com/bid/36570  View
444562 40464 CVE-2009-3029 OSVDB:58651  View
444563 40464 CVE-2009-3029 URL:http://www.osvdb.org/58651  View
444564 40464 CVE-2009-3029 SECTRACK:1022989  View
444565 40464 CVE-2009-3029 URL:http://securitytracker.com/id?1022989  View
444566 40464 CVE-2009-3029 SECUNIA:36972  View
444567 40464 CVE-2009-3029 URL:http://secunia.com/advisories/36972  View
444568 40464 CVE-2009-3029 VUPEN:ADV-2009-2849  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45258 JVNDB-2009-006265 Symantec Altiris Deployment Solution などの Web コンソールにおけるバッファオーバーフローの脆弱性 Symantec Altiris Deployment Solution、Altiris Notification Server、および Management Platform の Web コンソールの AeXNSConsoleUtilities.dll の Altiris eXpress NS Console Utilities ActiveX コントロールの RunCmd メソッドには、バッファオーバーフローの脆弱性が存在します。 CVE-2009-3033 40464 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006265.html  View