Remote Code Execution Flaw in Symantec IM Manager Administrative Interface
CVE-2010-3719

Currently unrated

Key Information:

Vendor

Symantec
Status
Im Manager
Vendor
CVE Published:
2 February 2011

What is CVE-2010-3719?

The administrative interface for Symantec IM Manager contains an eval injection vulnerability in the IMAdminSchedTask.asp file. This flaw allows remote attackers to exploit unspecified parameters in the ScheduleTask method, leading to the execution of arbitrary code. Proper security measures and updates are essential to mitigate such risks to system integrity and user confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.zerodayinitiative.com/advisories/ZDI-11-037
x_refsource_MISC
http://www.securityfocus.com/archive/1/516103/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/45946
vdb-entryx_refsource_BID

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.