Foofus.net Security Advisory 20100726 – Symantec Antivirus CE Command Execution

The Symantec Antivirus Corporate Edition AMS Intel Alert Handler service (hndlrsvc.exe) provides alert setup and response capabilities to AMS2. A design error in Symantec’s implementation of this function allows an attacker who can establish a TCP connection to port 38292, on a vulnerable host to execute commands at system level on that host. Versions 10.1.8.8000 and below are affected.

You can download this advisory from the following link: https://packetstormsecurity.com/files/download/92179/foofus-20100726.txt

Source: https://packetstormsecurity.com/files/92179/Foofus.net-Security-Advisory-20100726-Symantec-Antivirus-CE-Command-Execution.html