CVE-2009-1431 - XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service

Back Back to CVE browser

HIGH

XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service

Published Apr 29, 2009

9.3

HIGH

CVSS 2.0

EPSS 8.04%

Description

XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (10)

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=786
third-party-advisoryx_refsource_IDEFENSEThird Party Advisory
http://secunia.com/advisories/34856
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://www.securityfocus.com/bid/34675
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1022130
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1022131
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1022132
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02
x_refsource_CONFIRMVendor Advisory
http://www.vupen.com/english/advisories/2009/1204
vdb-entryx_refsource_VUPENThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1429
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50179
vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=786		third-party-advisoryx_refsource_IDEFENSEThird Party Advisory
http://secunia.com/advisories/34856		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://www.securityfocus.com/bid/34675		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1022130		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1022131		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1022132		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02		x_refsource_CONFIRMVendor Advisory
http://www.vupen.com/english/advisories/2009/1204		vdb-entryx_refsource_VUPENThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1429		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50179		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 29, 2009

Updated Aug 7, 2024

Reserved Apr 24, 2009

Link CVE-2009-1431

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-1431

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 29, 2009

Updated Aug 7, 2024

Link EUVD-2009-1429

GitHub

No data