Lucene search

K

MitreCVELIST:CVE-2009-3108

HistorySep 08, 2009 - 11:00 p.m.

CVE-2009-3108

2009-09-0823:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.5%

The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.

References

secunia.com/advisories/36502

www.securityfocus.com/bid/36111

www.securitytracker.com/id?1022779

www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.5%

Related for CVELIST:CVE-2009-3108

cve1 nvd1 prion1 symantec1 nessus1