310 matches found
Altiris Deployment Solution Agent < 6.9.176 Multiple Local Vulnerabilities
The version of the Altiris Deployment Solution Agent installed on the remote host reportedly is affected by several issues : - A local user could access a privileged command prompt via the Agent's user interface CVE-2008-2290. - A local user could leverage a GUI tooltip to access a privileged...
Symantec Altiris Deployment Solution SQL Injection Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Symantec Altiris Deployment Solution. User interaction is not required to exploit this vulnerability. The specific flaw exists within the axengine.exe process listening by default on TCP port 402. A lack ...
Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation
// 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com // // Eduardo Vela aka sirdarckcat //...
Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability
This vulnerability allows attackers to remotely obtain domain credentials on vulnerable installations of Symantec Altiris Deployment Solution. User interaction is not required to exploit this vulnerability. Authentication is not required to exploit this vulnerability. The specific flaw exists...
Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation
Symantec Altiris Client Service 6.8.378 - Local Privilege Escalation // 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx //...
symantec-escalate.txt
// 0day PRIVATE NOT DISTRIBUTE!!! // // Symantec Altiris Client Service Local Exploit 0day // // Affected Versions : Altiris Client 6.5.248 // Altiris Client 6.5.299 // Altiris client 6.8.378 // // Alex Hernandez aka alt3kx // ahernandez at sybsecurity.com // // Eduardo Vela aka sirdarckcat //...
Symantec Altiris Deployment Solution AClient口令泄露漏洞
BUGTRAQ ID: 28707 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec Altiris Deployment Solution的AClient.exe进程在内存中以明文存储AClient口令，恶意的本地用户可以通过dump AClient.exe进程内存检索本地代理管理接口的口令。 Symantec Altiris Deployment Solution 6.8.x Symantec --------...
CVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...
Design/Logic Flaw
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...
CVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent aka AClient password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory...
CVE-2008-1754
The CVE-2008-1754 issue affects Symantec Altiris Deployment Solution before 6.9.164, where the Deployment Solution Agent (AClient) password is stored in cleartext in memory. This allows a local attacker to obtain sensitive credentials by dumping the aclient.exe process memory, leading to potentia...
CVE-2008-1473
The Altiris Client Service AClient.exe in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Shatter" style attack...
Design/Logic Flaw
The Altiris Client Service AClient.exe in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Shatter" style attack...
CVE-2008-1473
The Altiris Client Service AClient.exe in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Shatter" style attack...
CVE-2008-1473
The CVE affects the Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164, allowing local users to gain privileges via a Shatter-style attack. Root cause is a privilege-escalation path in AClient.exe; impact is local privilege elevation. Mitigation: upg...
Symantec Altiris Deployment服务器代理AClient.exe本地权限提升漏洞
BUGTRAQ ID: 28110 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec Altiris Deployment服务器代理存在权限提升漏洞，本地攻击者可以通过shatter攻击获得非授权的特权访问。仅有登录到运行了Symantec Altiris Deployment Solution代理（AClient.exe） 的系统的攻击者才可以利用这个漏洞。 Symantec Altiris Deployment Solution 6.8.x Symantec...
Altiris AClient < 6.9.164 Multiple Local Vulnerabilities
The version of the Altiris Client Agent aclient installed on the remote host reportedly is susceptible to a shatter attack that could allow a local user to elevate his or her privileges on the affected system. In addition, the Altiris Deployment Solution reportedly stores the AClient password in...
Altiris AClient < 6.9.164 Multiple Vulnerabilities
Binary data 4419.prm...