CVE-2010-0110

Related Files

Symantec Alert Management System HNDLRSVC Arbitrary Command Execution

Posted Jan 29, 2011

Authored by TELUS Security Labs | Site telussecuritylabs.com

An arbitrary program execution vulnerability exists in Symantec Alert Management System (AMS) service shipped with multiple Symantec products. The vulnerability could be exploited by remote unauthenticated attackers to execute arbitrary code with SYSTEM privileges.

tags | advisory, remote, arbitrary

advisories | CVE-2010-0110

SHA-256 | eee2169d996a231a38ee1755b3896a7774d1175ed44b33559666eb32ec79256f

Download | Favorite | View

Zero Day Initiative Advisory 11-028

Posted Jan 28, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-028 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Symantec Alert Management System. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AMSLIB.dll module while processing data sent from the msgsys.exe process which listens by default on TCP port 38292. The DLL allocates a fixed length stack buffer and subsequently copies a user-supplied string using memcpy without validating the size. By supplying a large enough value this buffer can be overflowed leading to arbitrary code execution under the context of the vulnerable daemon.

tags | advisory, remote, overflow, arbitrary, tcp, code execution

advisories | CVE-2010-0110

SHA-256 | 089534d8e241bfd9582905aa5c96f9b5ef41c1541a8cdde40fa0a1612acdc0da

Download | Favorite | View