Unscored CVE-2011-0688 EUVD-2011-0706GHSA-f49g-9gwg-jc3x

Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec Sy…

Published Jan 31, 2011 · Updated Aug 6, 2024 · Assigned by mitre

Description

Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111. NOTE: some of these details are obtained from third party information.

References

43099 third-party-advisory
symantec-tcp-command-execution(65071) vdb-entry
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
1024996 vdb-entry
45936 vdb-entry
ADV-2011-0234 vdb-entry