Description
Stack-based buffer overflow in Symantec Antivirus 10.1 and Client Security 3.1 allows remote attackers to execute arbitrary code via unknown attack vectors.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Symantec Remote Management Buffer Overflow
exploit/windows/antivirus/symantec_rtvscan
Exploit-DB 1
- Symantec Remote Management - Remote Buffer Overflow (Metasploit) EDB-16830 · remote · May 9, 2010 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- ADV-2006-2005 vdb-entry
- EEYEB-20060524 third-party-advisory
- 1016161 vdb-entry
- http://securityresponse.symantec.com/avcenter/security/Content/2006.05.25.html
- 1016162 vdb-entry
- 20060527 Symantec antivirus software exposes computers mailing-list
- symantec-antivirus-client-bo(26706) vdb-entry
- VU#404910 third-party-advisory
- 20318 third-party-advisory
- 18107 vdb-entry
- 20060526 new symantec vuln mailing-list