CVEvulnerability
CVE-2009-1432
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-20
Description
Symantec Reporting Server, as used in Symantec AntiVirus (SAV) Corporate Edition 10.1 before 10.1 MR8 and 10.2 before 10.2 MR2, Symantec Client Security (SCS) before 3.1 MR8, and the Symantec Endpoint Protection Manager (SEPM) component in Symantec Endpoint Protection (SEP) before 11.0 MR2, allows remote attackers to inject arbitrary text into the login screen, and possibly conduct phishing attacks, via vectors involving a URL that is not properly handled.
Affected configurations
• symantec antivirus 10.1
• symantec antivirus 10.2
• symantec client security 3.1
• symantec endpoint protection 11.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/34856 Third Party Advisory
- http://secunia.com/advisories/34935 Third Party Advisory
- http://securitytracker.com/id?1022136 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1022137 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1022138 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/34668 Third Party Advisory, VDB Entry
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1202 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/1204 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50172 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/34856 Third Party Advisory
- http://secunia.com/advisories/34935 Third Party Advisory
- http://securitytracker.com/id?1022136 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1022137 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1022138 Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/34668 Third Party Advisory, VDB Entry
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_00 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1202 Third Party Advisory
- http://www.vupen.com/english/advisories/2009/1204 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50172 Third Party Advisory, VDB Entry