CVE-2009-1429

CVE-2009-1429 describes a critical remote command execution vulnerability in the Intel LANDesk Common Base Agent (CBA) used across multiple Symantec products, including Symantec AntiVirus, Client Security, Endpoint Protection, and System Center. This flaw allows unauthenticated remote attackers to execute arbitrary commands by sending a specially crafted network packet that the CBA interprets as a command to be launched. With a CVSS score of 10.0, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Exploit intelligence indicates the existence of public Metasploit modules and ExploitDB entries, confirming readily available exploit code, though community discussion and media coverage remain low.