Vulnerability Details : CVE-2011-0688
Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111. NOTE: some of these details are obtained from third party information.
Vulnerability category: BypassGain privilege
Products affected by CVE-2011-0688
- cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.5.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.5:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.6.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.6:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.2:mr3:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.4.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.4:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.0.1:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.7:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.8:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.1.9:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus:10.0.1.2:*:corporate:*:*:*:*:*
- cpe:2.3:a:symantec:system_center:10.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:system_center:10.1:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus_central_quarantine_server:3.5:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:antivirus_central_quarantine_server:3.6:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2011-0688
1.34%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 84 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2011-0688
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST |
CWE ids for CVE-2011-0688
-
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-0688
-
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00
Symantec Intel Alert Management System Multiple Code Execution Issues
-
http://www.vupen.com/english/advisories/2011/0234
Webmail | OVH- OVHVendor Advisory
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/65071
multiple Symantec products TCP command execution CVE-2011-0688 Vulnerability Report
-
http://securitytracker.com/id?1024996
Symantec Antivirus Corporate Edition Intel AMS Service Lets Remote Users Execute Arbitrary Code - SecurityTracker
-
http://www.securityfocus.com/bid/45936
Symantec Intel Alert Management System (CVE-2010-0110) Buffer Overflow Vulnerabilities
Jump to