Code injection

2009-09-0823:30:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.5%

JSON

The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.

CPENameOperatorVersion
altiris_deployment_solutioneq6.9
altiris_deployment_solutioneq6.9 sp1
altiris_deployment_solutioneq6.9.164
altiris_deployment_solutioneq6.9.176
altiris_deployment_solutioneq6.9.355 sp1
altiris_deployment_solutioneq6.9.355

Name	Operator	Version
altiris_deployment_solution	eq	6.9
altiris_deployment_solution	eq	6.9 sp1
altiris_deployment_solution	eq	6.9.164
altiris_deployment_solution	eq	6.9.176
altiris_deployment_solution	eq	6.9.355 sp1
altiris_deployment_solution	eq	6.9.355