Lucene search
HistorySep 08, 2009 - 11:30 p.m.
CVE-2009-3108
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.5%
The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.
Affected configurations
Node
symantecaltiris_deployment_solutionMatch6.9
ORsymantecaltiris_deployment_solutionMatch6.9sp1
ORsymantecaltiris_deployment_solutionMatch6.9.164
ORsymantecaltiris_deployment_solutionMatch6.9.176
ORsymantecaltiris_deployment_solutionMatch6.9.355
ORsymantecaltiris_deployment_solutionMatch6.9.355sp1
Related
cve
cve
CVE-2009-3108
2009-09-08 23:30:00
cvelist
cvelist
CVE-2009-3108
2009-09-08 23:00:00
prion
prion
Code injection
2009-09-08 23:30:00
symantec
symantec
Symantec Altiris Deployment Solution Multiple Vulnerabilities
2009-08-26 08:00:00
nessus
nessus
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
9.5%
Related for NVD:CVE-2009-3108