CVE-2010-3719

Public PoC / Exploit

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Eval injection vulnerability in IMAdminSchedTask.asp in the administrative interface for Symantec IM Manager 8.4.16 and earlier allows remote attackers to execute arbitrary code via unspecified parameters to the ScheduleTask method.

Weaknesses (CWE)

CWE-94

Affected Products (19)

symantec · im_managervulnerable

References (16)

http://osvdb.org/70755

http://secunia.com/advisories/43143

Vendor Advisory

http://www.securityfocus.com/archive/1/516103/100/0/threaded

http://www.securityfocus.com/bid/45946

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110131_00

http://www.vupen.com/english/advisories/2011/0259

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-037

https://exchange.xforce.ibmcloud.com/vulnerabilities/65040

http://osvdb.org/70755

http://secunia.com/advisories/43143

Vendor Advisory

http://www.securityfocus.com/archive/1/516103/100/0/threaded

http://www.securityfocus.com/bid/45946

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110131_00

http://www.vupen.com/english/advisories/2011/0259

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-11-037

https://exchange.xforce.ibmcloud.com/vulnerabilities/65040