CVEvulnerability

CVE-2011-0688

9.3 HIGH Published 2011-01-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-01-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287

Description

Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111. NOTE: some of these details are obtained from third party information.

Affected configurations

• symantec antivirus 10.0 • symantec antivirus 10.0.1 • symantec antivirus 10.0.1.1 • symantec antivirus 10.0.1.2 • symantec antivirus 10.0.2 • symantec antivirus 10.0.2.1 • symantec antivirus 10.0.2.2 • symantec antivirus 10.0.3 • symantec antivirus 10.0.4 • symantec antivirus 10.0.5 • symantec antivirus 10.0.6 • symantec antivirus 10.0.7 • symantec antivirus 10.0.8 • symantec antivirus 10.0.9 • symantec antivirus 10.1 • symantec antivirus 10.1.0.1 • symantec antivirus 10.1.4 • symantec antivirus 10.1.4.1 • symantec antivirus 10.1.5 • symantec antivirus 10.1.5.1 • symantec antivirus 10.1.6 • symantec antivirus 10.1.6.1 • symantec antivirus 10.1.7 • symantec antivirus 10.1.8 • symantec antivirus 10.1.9 • symantec antivirus 10.2 • symantec system center 10.0 • symantec system center 10.1 • symantec antivirus central quarantine server 3.5 • symantec antivirus central quarantine server 3.6

Related

Weakness · CWE (1)

  • CWE-287 Improper Authentication weakness

References