© 2026 vulntracker.io

CVE-2009-1429

N/A

Published: April 29, 2009 at 03:00 PM UTC

Updated: June 16, 2026 at 11:07 PM UTC

5 products affected across 1 vendorEndpoint ProtectionClient SecurityAntivirus

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 88%

Description

The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Antivirus · Symantec

95%

v ≤ 10.1v ≤ 10.2v ≤ 9.010.0 10.0.1 10.0.1.1 10.0.2 10.0.2.1 10.0.2.2 10.0.3 10.0.4 10.0.5 10.0.6 10.0.7 10.0.8 10.0.9

Antivirus Central Quarantine Server · Symantec

95%

All versions

Client Security · Symantec

95%

v ≤ 3.12.0 3.0 3.0.0.359 3.0.1.1000 3.0.1.1001 3.0.1.1007 3.0.1.1008 3.0.1.1009 3.0.2 3.0.2.2000 3.0.2.2001 3.0.2.2002 3.0.2.2010 3.0.2.2011 3.0.2.2020 3.0.2.2021

Endpoint Protection · Symantec

95%

v ≤ 11.0

System Center · Symantec

95%

All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (10)

VDB Entryx_refsource_OSVDB

Source: [email protected]

http://osvdb.org/54157

Third Party Advisoryx_refsource_SECUNIAVendor Advisory

Source: [email protected]

http://secunia.com/advisories/34856

Third Party Advisoryx_refsource_SREASON

Source: [email protected]

http://securityreason.com/securityalert/8346

VDB Entryx_refsource_BIDExploit

Source: [email protected]

http://www.securityfocus.com/bid/34671

VDB Entryx_refsource_SECTRACK

Source: [email protected]

http://www.securitytracker.com/id?1022130

VDB Entryx_refsource_SECTRACK

Source: [email protected]

http://www.securitytracker.com/id?1022131

VDB Entryx_refsource_SECTRACK

Source: [email protected]

http://www.securitytracker.com/id?1022132

x_refsource_CONFIRM

Source: [email protected]

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02

CVSS

10HIGH[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

CWE-94

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card