Lucene search
HistoryMay 18, 2008 - 2:20 p.m.
CVE-2008-2287
cve-2008-2287
symantec altiris
deployment solution
local privilege escalation
vulnerability
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
Affected configurations
Node
symantecaltiris_deployment_solutionMatch6.8
ORsymantecaltiris_deployment_solutionMatch6.9
References
Related
cvelist
cvelist
CVE-2008-2287
2008-05-18 14:00:00
nvd
nvd
CVE-2008-2287
2008-05-18 14:20:00
prion
prion
Design/Logic Flaw
2008-05-18 14:20:00
nessus
nessus
Altiris Deployment Solution Agent < 6.9.176 Multiple Local Vulnerabilities
2008-05-15 00:00:00
Altiris Deployment Solution < 6.9.176 Multiple Vulnerabilities
2008-05-15 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2008-2287