CVE-2011-0688

Intel Alert Management System (aka AMS or AMS2), as used in Symantec Antivirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary commands via crafted messages over TCP, as discovered by Junaid Bohio, a different vulnerability than CVE-2010-0110 and CVE-2010-0111.  NOTE: some of these details are obtained from third party information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 84%
VendorProductVersion
symantecantivirus
10.0
symantecantivirus
10.0:mr1
symantecantivirus
10.0:mr2
symantecantivirus
10.0.1
symantecantivirus
10.0.1.1
symantecantivirus
10.0.1.2
symantecantivirus
10.0.2
symantecantivirus
10.0.2.1
symantecantivirus
10.0.2.2
symantecantivirus
10.0.3
symantecantivirus
10.0.4
symantecantivirus
10.0.5
symantecantivirus
10.0.6
symantecantivirus
10.0.7
symantecantivirus
10.0.8
symantecantivirus
10.0.9
symantecantivirus
10.1
symantecantivirus
10.1:mp1
symantecantivirus
10.1:mr4
symantecantivirus
10.1:mr5
symantecantivirus
10.1:mr6
symantecantivirus
10.1:mr7
symantecantivirus
10.1.0.1
symantecantivirus
10.1.4
symantecantivirus
10.1.4.1
symantecantivirus
10.1.5
symantecantivirus
10.1.5.1
symantecantivirus
10.1.6
symantecantivirus
10.1.6.1
symantecantivirus
10.1.7
symantecantivirus
10.1.8
symantecantivirus
10.1.9
symantecantivirus
10.2
symantecantivirus
10.2:mr2
symantecantivirus
10.2:mr3
symantecsystem_center
10.0
symantecsystem_center
10.1
symantecantivirus_central_quarantine_server
3.5
symantecantivirus_central_quarantine_server
3.6
𝑥
= Vulnerable software versions