NetSight
critical9.3

CVE-2011-0688

Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10…

Impact

Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111. NOTE: some of these details are obtained from third party information.

Affected products

VendorProductAffected versions
SymantecAntivirus
Versions 10.0, 10.0.1, 10.0.1.1, 10.0.1.2, 10.0.2, 10.0.2.1
SymantecSystem Center
Versions 10.0, 10.1
SymantecAntivirus Central Quarantine Server
Versions 3.5, 3.6

Weakness classification

References