Symantec Alert Management System pagehndl.dll Stack Buffer Overflow (CVE-2010-0110)

Symantec Alert management System 2 AMS2 is a package used by various Symantec solutions such as System Center, AntiVirus Server, and AntiVirus Central Quarantine Server. AMS2 starts multiple services on the system that run with System account privileges, by default. A stack buffer overflow...

CVE-2011-0688

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...

Code injection

HDNLRSVC.EXE in the Intel Alert Handler service aka Symantec Intel Handler service in Intel Alert Management System aka AMS or AMS2, as used in Symantec AntiVirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows...

Stack overflow

Multiple stack-based buffer overflows in Intel Alert Management System aka AMS or AMS2, as used in Symantec AntiVirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via 1 ...

Information disclosure

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...

CVE-2011-0688

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...

CVE-2010-0111

CVE-2010-0111 affects Intel Alert Management System (AMS/AMS2) as used in Symantec AntiVirus Corporate Edition prior to 10.1 MR10, Symantec System Center 10.x, and Symantec Quarantine Server 3.5/3.6. The HDNLRSVC.EXE Intel Alert Handler service can be influenced via a UNC share pathname supplied ...

CVE-2011-0688

CVE-2011-0688 affects Intel Alert Management System (AMS/AMS2) as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x (before 10.1 MR10), Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5/3.6. It allows remote attackers to execute arbitrary commands via crafted TCP messa...

CVE-2011-0688: Improper Authentication

Intel Alert Management System aka AMS or AMS2, as used in Symantec Antivirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discover...

CVE-2010-0110: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Intel Alert Management System aka AMS or AMS2, as used in Symantec AntiVirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via 1 ...

CVE-2010-0111: Improper Input Validation

HDNLRSVC.EXE in the Intel Alert Handler service aka Symantec Intel Handler service in Intel Alert Management System aka AMS or AMS2, as used in Symantec AntiVirus Corporate Edition SAVCE 10.x before 10.1 MR10, Symantec System Center SSC 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows...

PT-2011-1357

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus Corporate Edition versions prior to 10.1 MR10 Symantec System Center versions 10.x Symantec Quarantine Server versions 3.5 through 3.6 Description The issue allows remote attackers to execute arbitrary programs by sending a...

PT-2011-1356

Name of the Vulnerable Software and Affected Versions Symantec AntiVirus Corporate Edition versions 10.0 through 10.1 MR9 Symantec System Center versions 10.x Symantec Quarantine Server versions 3.5 through 3.6 Description The issue allows remote attackers to execute arbitrary code via multiple...

Multiple Symantec Intel Alert Management System Arbitrary Message Creation or Denial of Service

SUMMARY Symantec was notified of a improper message handling procedures in the Intel Alert Management System AMS2 that can be used to send arbitrary messages or kill the Intel Alert Handler service. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec AntiVirus Corporate Edition...

Symantec Intel Alert Management System Multiple Code Execution Issues

SUMMARY Symantec was notified of multiple instances of failure to properly handle user input in the Third Party Intel Alert Management System AMS2 which could result in arbitrary code execution. AFFECTED PRODUCTS Product | Version | Solution ---|---|--- Symantec AntiVirus Corporate Edition Server...