Lucene search
HistoryApr 11, 2008 - 9:05 p.m.
CVE-2008-1754
symantec
altiris
deployment solution
cve-2008-1754
aclient
password
cleartext
memory
vulnerability
nvd
1.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Affected configurations
Node
symantecaltiris_deployment_solutionRange≤6.8sp2
ORsymantecaltiris_deployment_solutionMatch6.8sp1
ORsymantecaltiris_deployment_solutionMatch6.8.380
Related
cvelist
cvelist
CVE-2008-1754
2008-04-11 20:28:00
prion
prion
Design/Logic Flaw
2008-04-11 21:05:00
nvd
nvd
CVE-2008-1754
2008-04-11 21:05:00
nessus
nessus
Altiris AClient < 6.9.164 Multiple Local Vulnerabilities
2008-03-12 00:00:00
1.7 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:S/C:P/I:N/A:N
5.9 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-1754