Vulnerability-Lookup

CNVD-2016-10531

Vulnerability from cnvd - Published: 2016-11-02

Title

Symantec IT Management Suite拒绝服务漏洞

Description

Symantec IT Management Suite 让 IT 管理员能够在 Windows、Mac、Linux、Unix 和虚拟环境中，安全管理台式机、笔记本电脑和服务器的整个生命周期，包括部署、资产管理、程序修补以及故障排除，从而大大降低成本，提高工作效率。 Symantec IT Management Suite 存在拒绝服务漏洞。注册用户可以通过发送大量的数据包来触发漏洞，造成DOS攻击。

Severity

低

Patch Name

Symantec IT Management Suite拒绝服务漏洞的补丁

Patch Description

Formal description

前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接： https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2016&suid=20161031_00#_top

Reference

http://www.securityfocus.com/bid/93951/info

Impacted products

Name
Symantec IT Management Suite 8.0

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "93951"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-6589"
    }
  },
  "description": "Symantec IT Management Suite \u8ba9 IT \u7ba1\u7406\u5458\u80fd\u591f\u5728 Windows\u3001Mac\u3001Linux\u3001Unix  \u548c\u865a\u62df\u73af\u5883\u4e2d\uff0c\u5b89\u5168\u7ba1\u7406\u53f0\u5f0f\u673a\u3001\u7b14\u8bb0\u672c\u7535\u8111\u548c\u670d\u52a1\u5668\u7684\u6574\u4e2a\u751f\u547d\u5468\u671f\uff0c\u5305\u62ec\u90e8\u7f72\u3001\u8d44\u4ea7\u7ba1\u7406\u3001\u7a0b\u5e8f\u4fee\u8865\u4ee5\u53ca\u6545\u969c\u6392\u9664\uff0c\u4ece\u800c\u5927\u5927\u964d\u4f4e\u6210\u672c\uff0c\u63d0\u9ad8\u5de5\u4f5c\u6548\u7387\u3002\r\n\r\nSymantec IT Management Suite \u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u6ce8\u518c\u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u53d1\u9001\u5927\u91cf\u7684\u6570\u636e\u5305\u6765\u89e6\u53d1\u6f0f\u6d1e\uff0c\u9020\u6210DOS\u653b\u51fb\u3002",
  "discovererName": "Marcin Zieba of Prevenity.com",
  "formalWay": "\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6b64\u5b89\u5168\u95ee\u9898\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=2016\u0026suid=20161031_00#_top",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2016-10531",
  "openTime": "2016-11-02",
  "patchDescription": "Symantec IT Management Suite \u8ba9 IT \u7ba1\u7406\u5458\u80fd\u591f\u5728 Windows\u3001Mac\u3001Linux\u3001Unix  \u548c\u865a\u62df\u73af\u5883\u4e2d\uff0c\u5b89\u5168\u7ba1\u7406\u53f0\u5f0f\u673a\u3001\u7b14\u8bb0\u672c\u7535\u8111\u548c\u670d\u52a1\u5668\u7684\u6574\u4e2a\u751f\u547d\u5468\u671f\uff0c\u5305\u62ec\u90e8\u7f72\u3001\u8d44\u4ea7\u7ba1\u7406\u3001\u7a0b\u5e8f\u4fee\u8865\u4ee5\u53ca\u6545\u969c\u6392\u9664\uff0c\u4ece\u800c\u5927\u5927\u964d\u4f4e\u6210\u672c\uff0c\u63d0\u9ad8\u5de5\u4f5c\u6548\u7387\u3002\r\n\r\nSymantec IT Management Suite \u5b58\u5728\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u3002\u6ce8\u518c\u7528\u6237\u53ef\u4ee5\u901a\u8fc7\u53d1\u9001\u5927\u91cf\u7684\u6570\u636e\u5305\u6765\u89e6\u53d1\u6f0f\u6d1e\uff0c\u9020\u6210DOS\u653b\u51fb\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Symantec IT Management Suite\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Symantec  IT Management Suite 8.0"
  },
  "referenceLink": "http://www.securityfocus.com/bid/93951/info",
  "serverity": "\u4f4e",
  "submitTime": "2016-11-01",
  "title": "Symantec IT Management Suite\u62d2\u7edd\u670d\u52a1\u6f0f\u6d1e"
}

CVE-2016-6589 (GCVE-0-2016-6589)

Vulnerability from cvelistv5 – Published: 2020-01-08 15:55 – Updated: 2024-08-06 01:36

Summary

A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0.

Severity

No CVSS data available.

CWE

denial of service

Assigner

symantec mitre root Scorecard

References

3 references

URL	Tags
https://www.symantec.com/security_response/securi…	x_refsource_MISC
http://www.securityfocus.com/bid/93951	x_refsource_MISC
https://support.symantec.com/us/en/article.symsa1…	x_refsource_CONFIRM

Impacted products

1 product

Vendor	Product	Version
Symantec	IT Management Suite	Affected: before 8.0 HF4

Date Public

2016-10-31 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:36:28.254Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=\u0026suid=20161031_00"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93951"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.symantec.com/us/en/article.symsa1383.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IT Management Suite",
          "vendor": "Symantec",
          "versions": [
            {
              "status": "affected",
              "version": "before 8.0 HF4"
            }
          ]
        }
      ],
      "datePublic": "2016-10-31T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "denial of service",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-01-08T15:55:08.000Z",
        "orgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
        "shortName": "symantec"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=\u0026suid=20161031_00"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.securityfocus.com/bid/93951"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.symantec.com/us/en/article.symsa1383.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@symantec.com",
          "ID": "CVE-2016-6589",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "IT Management Suite",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "before 8.0 HF4"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Symantec"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A Denial of Service vulnerability exists in the ITMS workflow process manager login window in Symantec IT Management Suite 8.0."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "denial of service"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=\u0026suid=20161031_00",
              "refsource": "MISC",
              "url": "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=\u0026suid=20161031_00"
            },
            {
              "name": "http://www.securityfocus.com/bid/93951",
              "refsource": "MISC",
              "url": "http://www.securityfocus.com/bid/93951"
            },
            {
              "name": "https://support.symantec.com/us/en/article.symsa1383.html",
              "refsource": "CONFIRM",
              "url": "https://support.symantec.com/us/en/article.symsa1383.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "80d3bcb6-88de-48c2-a47e-aebf795f19b5",
    "assignerShortName": "symantec",
    "cveId": "CVE-2016-6589",
    "datePublished": "2020-01-08T15:55:08.000Z",
    "dateReserved": "2016-08-03T00:00:00.000Z",
    "dateUpdated": "2024-08-06T01:36:28.254Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2016-10531

CVE-2016-6589 (GCVE-0-2016-6589)

Tags

Sightings

Nomenclature

Related by attack behaviour