CVE-2009-3107
7.2 High
AI Score
Confidence
Low
4.8 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
54.1%
Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.
| CPE | Name | Operator | Version |
|---|---|---|---|
| symantec:altiris_deployment_solution | symantec altiris deployment solution | eq | 6.9 |
Related
7.2 High
AI Score
Confidence
Low
4.8 Medium
CVSS2
Access Vector
ADJACENT_NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:A/AC:L/Au:N/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
54.1%