CVE-2009-1429: Code Injection
The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-1429?
CVE-2009-1429 has a medium severity rating, indicating it may cause a moderate impact on system security.
How do I fix CVE-2009-1429?
To fix CVE-2009-1429, update to a patched version of Symantec Antivirus or Symantec System Center that addresses the vulnerability.
Which software versions are affected by CVE-2009-1429?
CVE-2009-1429 affects multiple versions of Symantec Antivirus Corporate Edition, as well as other associated Symantec products prior to specific updates.
What impact does CVE-2009-1429 have on my system?
CVE-2009-1429 could potentially allow a remote attacker to execute arbitrary code or disrupt service, impacting system integrity.
Was CVE-2009-1429 disclosed publicly?
Yes, CVE-2009-1429 was publicly disclosed, allowing organizations to take necessary precautions and apply fixes.