NVD

Id
48705  
Name
CVE-2009-1429  
Description
The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-04-29  
Modified Date
2013-02-06  
Seq
2009-1429  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246050 48705 CVE-2009-1429 8346  View
246051 48705 CVE-2009-1429 34671  View
246052 48705 CVE-2009-1429 1022130  View
246053 48705 CVE-2009-1429 1022131  View
246054 48705 CVE-2009-1429 1022132  View
246055 48705 CVE-2009-1429 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02  View
246056 48705 CVE-2009-1429 ADV-2009-1204  View
246057 48705 CVE-2009-1429 symantec-cba-command-execution(50176)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44952 JVNDB-2009-005959 SSS などで使用される AMS の CBA における任意のコマンドを実行される脆弱性 Symantec System Center (SSS)、Symantec AntiVirus Server、Symantec AntiVirus Central Quarantine Server、Symantec AntiVirus (SAV) Corporate Edition、Symantec Client Security (SCS)、および Symantec Endpoint Protection (SEP) で使用される Symantec Alert Management System (AMS) の Intel LANDesk Common Base Agent (CBA) には、任意のコマンドを実行される脆弱性が存在します。 CVE-2009-1429 38860 CVE-2009-1429 48705 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005959.html 2009-04-28 2012-12-20 View