Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2009-1429

Quick assessment

Affected

n/a n/a

Exploitation

High exploitation probability; assess promptly

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Symantec AntiVirus是非常流行的杀毒解决方案。 Symantec杀毒软件产品的Intel LANDesk Common Base Agent(CBA)服务中存在安全漏洞。如果远程攻击者向TCP 12174端口发送了恶意报文以向CreateProcessA()函数传送恶意参数的话，就会导致以SYSTEM权限执行任意代码。

AI Predicted 10.0 Difficulty: Trivial EPSS 87.72% · P100 Updated Feb 21, 2026

Public Exploits 3

ExploitDB · 2 EDB-10340 [remote] EDB-17699 [remote]

Metasploit · 1 ams_xfr.rb [exploit]

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2009-1429

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

The Intel LANDesk Common Base Agent (CBA) in Symantec Alert Management System 2 (AMS2), as used in Symantec System Center (SSS); Symantec AntiVirus Server; Symantec AntiVirus Central Quarantine Server; Symantec AntiVirus (SAV) Corporate Edition 9 before 9.0 MR7, 10.0 and 10.1 before 10.1 MR8, and 10.2 before 10.2 MR2; Symantec Client Security (SCS) 2 before 2.0 MR7 and 3 before 3.1 MR8; and Symantec Endpoint Protection (SEP) before 11.0 MR3, allows remote attackers to execute arbitrary commands via a crafted packet whose contents are interpreted as a command to be launched in a new process by the CreateProcessA function.

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Symantec杀毒软件Intel LANDesk Common Base Agent服务任意代码执行漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
-	n/a	n/a	-

II. Public POCs for CVE-2009-1429

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2009-1429

请登录查看更多情报信息。

Vendor Advisories for CVE-2009-1429 (8)

http://www.securityfocus.com/bid/34671 vdb-entry x_refsource_BID
http://secunia.com/advisories/34856 third-party-advisory x_refsource_SECUNIA
http://osvdb.org/54157 vdb-entry x_refsource_OSVDB
http://www.securitytracker.com/id?1022130 vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1022132 vdb-entry x_refsource_SECTRACK
http://www.securitytracker.com/id?1022131 vdb-entry x_refsource_SECTRACK
http://www.vupen.com/english/advisories/2009/1204 vdb-entry x_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/50176 vdb-entry x_refsource_XF

Other References for CVE-2009-1429 (2)

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090428_02 x_refsource_CONFIRM
http://securityreason.com/securityalert/8346 third-party-advisory x_refsource_SREASON

https://www.cve.org/CVERecord?id=CVE-2009-1429

Same Patch Batch · n/a · 2009-04-29 · 23 CVEs total

CVE-2009-1484		Gecad Axigen Mail Server web邮件界面跨站脚本攻击漏洞
CVE-2009-1478		Sun Solaris DTrace Handler IOCTL Request 多个本地拒绝服务漏洞
CVE-2009-1431		Symantec Alert Management System 2 安全漏洞
CVE-2009-1430		Symantec杀毒软件 Intel Alert Originator服务栈溢出漏洞
CVE-2009-1428		Symantec Log Viewer 'ccLgView.exe'多个跨站脚本攻击漏洞
CVE-2009-0719		HP-UX 'useradd'本地未授权访问漏洞
CVE-2009-1489		FunGamez 'includes/user.php'本地文件包含和SQL注入漏洞
CVE-2009-1488		FunGamez 'admin/load.php'目录遍历漏洞
CVE-2009-1487		FunGamez 'pages/login.php'SQL注入漏洞
CVE-2009-1486		Ninjadesigns Flatchat 'pmscript.php'目录遍历漏洞
CVE-2009-1485		emuleplus emule_plus拒绝服务漏洞
CVE-2008-6768		Shopsystem-Forum K&S Shopsystem 'admin/editor/images.php'未限制文件上传漏洞
CVE-2009-1483		Studio Lounge Address Book'upload-file.php'未限制文件上传漏洞
CVE-2009-1482		MoinMoin 'AttachFile.py'多个跨站脚本攻击漏洞
CVE-2009-1481		Pjhome PuterJam's Blog PJBlog3 'action.asp' SQL注入漏洞
CVE-2009-1480		Pragyan CMS 'index.php' SQL注入漏洞
CVE-2008-6774		peterselie yourplace 'internettoolbar/edit.php'权限许可和访问控制漏洞
CVE-2008-6773		Peterselie YourPlace 'user/internettoolbar/edit.php'静态代码注入漏洞
CVE-2008-6772		Peterselie YourPlace 'login/register_form.php'绕过权限漏洞
CVE-2008-6771		Peterselie YourPlace 'user/uploads/phpinfo.php'系统信息泄露漏洞

Showing top 20 of 23 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a

Same vendor: n/a

V. Comments for CVE-2009-1429

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2009-1429

Quick assessment

Public Exploits 3

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2009-1429

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Shenlong Deep Dive — AI Deep Analysis

Affected Products

II. Public POCs for CVE-2009-1429

III. Intelligence Information for CVE-2009-1429

Vendor Advisories for CVE-2009-1429 (8)

Other References for CVE-2009-1429 (2)

Same Patch Batch · n/a · 2009-04-29 · 23 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2009-1429

Leave a comment