CVE-2009-1431

Description

XFR.EXE in the Intel File Transfer service in the console in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary code by placing the code on a (1) share or (2) WebDAV server, and then sending the UNC share pathname to this service.

9.3

CVSS

Severity: Critical

CVSS 2.0 •

EPSS 29.66% Top 5%

Vendor Advisory symantec.com

Affected: n/a n/a

References

Link	Tags
http://www.vupen.com/english/advisories/2009/1204	third party advisory vdb entry
http://www.securitytracker.com/id?1022132	third party advisory vdb entry
http://www.securitytracker.com/id?1022130	third party advisory vdb entry
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=786	third party advisory
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02	vendor advisory
http://secunia.com/advisories/34856	third party advisory
http://www.securitytracker.com/id?1022131	third party advisory vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/50179	third party advisory vdb entry
http://www.securityfocus.com/bid/34675	third party advisory vdb entry

Frequently Asked Questions

What is the severity of CVE-2009-1431?: CVE-2009-1431 has been scored as a critical severity vulnerability.
How to fix CVE-2009-1431?: To fix CVE-2009-1431, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2009-1431 being actively exploited in the wild?: It is possible that CVE-2009-1431 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~30% probability that this vulnerability will be exploited by malicious actors in the next 30 days.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.