Design/Logic Flaw

2008-04-1121:05:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.

CPENameOperatorVersion
altiris_deployment_solutioneq6.8 sp1
altiris_deployment_solutioneq6.8.380
altiris_deployment_solutionle6.8

Name	Operator	Version
altiris_deployment_solution	eq	6.8 sp1
altiris_deployment_solution	eq	6.8.380
altiris_deployment_solution	le	6.8

References

secunia.com/advisories/29771

securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html

www.osvdb.org/44388

www.securityfocus.com/bid/28707

www.securitytracker.com/id?1019825

www.vupen.com/english/advisories/2008/1197/references

exchange.xforce.ibmcloud.com/vulnerabilities/41771