355 matches found
papers
Papers A handy collection of my public papers, all in one place. Symantec Altiris Deployment Solution Elevation of Privileges Vulnerabilities 13048 Exploit-db publication at https://www.exploit-db.com/docs/english/13048-symantec-altiris-deployment-solution-elevation-of-privileges-vulns.pdf An...
CVE-2008-6827
CVE-2008-6827 Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation Exploit-DB publication at https://www.exploit-db.com/exploits/5625/ Author Alex Hernandez aka @alt3kx...
CVE-2026-15379
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
CVE-2026-15379 Arbitrary File Read as SYSTEM in Symantec ITMS
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
CVE-2026-15379
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
CVE-2026-15379
CVE-2026-15379 : The Altiris WMI provider exposes the AltirisAgent_Stream class, allowing any local standard user to read files accessible to the SYSTEM context, bypassing filesystem ACLs. The provider uses LocalSystem context for WMI queries without re-impersonating the caller, enabling read acc...
CVE-2026-15379 Arbitrary File Read as SYSTEM in Symantec ITMS
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
EUVD-2026-45151
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
PT-2026-60727
Name of the Vulnerable Software and Affected Versions Altiris WMI provider affected versions not specified Description The Altiris WMI provider contains a flaw in the AltirisAgent Stream class that allows a local standard user to read files accessible to the SYSTEM account, bypassing filesystem...
CVE-2026-15379: Improper Privilege Management
The Altiris WMI provider exposes a class AltirisAgentStream that allows any local standard user to read the contents of any file accessible to the SYSTEM account, bypassing filesystem ACLs. No admin privileges required. The provider reverts to the LocalSystem context when servicing WMI queries...
EUVD-2008-2287
Malware in sbrugna...
EUVD-2009-3091
Malware in sbrugna...
EUVD-2009-3162
Malware in sbrugna...
EUVD-2009-3093
Malware in sbrugna...
EUVD-2004-2613
Malware in sbrugna...
EUVD-2008-2286
Malware in sbrugna...
EUVD-2007-5530
Malware in sbrugna...
EUVD-2005-1593
Malware in sbrugna...