APP: Symantec IM Manager Administrator Console Code Injection
This signature detects attempts to exploit a known vulnerability against Symantec IM Manager. A successful attack can lead to invalid memory access and arbitrary Code Injection.
Extended Description
Symantec IM Manager is prone to a vulnerability that will let attackers run arbitrary code. Remote attackers can exploit this issue to run arbitrary code in the context of the affected application. IM Manager versions prior to 8.4.18 are affected.
Affected Products
Symantec im_manager
Short Name
APP:SYMC:IM-MGR-INJ
Severity
Major
Recommended
False
Recommended Action
Drop
Category
APP
Keywords
Administrator CVE-2011-0554 Code Console IM Injection Manager Symantec bid:49742
Release Date
10/18/2011
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Symantec
CVSS Score
7.5