Lucene search

K
cve[email protected]CVE-2009-3110
HistorySep 08, 2009 - 11:30 p.m.

CVE-2009-3110

2009-09-0823:30:00
CWE-362
web.nvd.nist.gov
24
symantec
altiris
deployment solution
cve-2009-3110
race condition
file transfer
security vulnerability

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%

Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.

Affected configurations

NVD
Node
symantecaltiris_deployment_solutionMatch6.9
OR
symantecaltiris_deployment_solutionMatch6.9sp1
OR
symantecaltiris_deployment_solutionMatch6.9.164
OR
symantecaltiris_deployment_solutionMatch6.9.176
OR
symantecaltiris_deployment_solutionMatch6.9.355
OR
symantecaltiris_deployment_solutionMatch6.9.355sp1

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:N/A:P

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.2%

Related for CVE-2009-3110