CVE-2025-9059 Elevation of Privileges Vulnerability in IT Management Suite

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2025-9059

CVE-2025-9059 affects the Altiris Core Agent Updater package (AeXNSC.exe). The vulnerability is an elevation of privileges caused by DLL hijacking, described in multiple sources as a local attack requiring low privileges and user interaction of NONE, with high impact overall (confidentiality, int...

PT-2025-37114

Name of the Vulnerable Software and Affected Versions: Altiris Core Agent Updater affected versions not specified Description: The Altiris Core Agent Updater package AeXNSC.exe is susceptible to an elevation of privileges issue due to DLL hijacking. Recommendations: At the moment, there is no...

CVE-2025-9059: Uncontrolled Search Path Element

The Altiris Core Agent Updater package AeXNSC.exe is prone to an elevation of privileges vulnerability through DLL hijacking...

CVE-2009-3179

Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execute arbitrary code via unknown client-side attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.17, as identified by 1 "Symantec Altiris Deployment...

CVE-2009-3178

Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a denial of service via unknown attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 7.18, "Symantec Altiris Deployment Solution 6.9 DoS." NOTE: as of...

Inventory Plugin for Symantec Management Agent Privilege Escalation

SUMMARY Symantec has released an update to address an issue that was discovered in the Inventory Plugin for Symantec Management Agent Altiris product. AFFECTED PRODUCTS Inventory Plugin for Symantec Management Agent Altiris --- CVE | Affected Versions | Remediation CVE-2018-5240 | Prior to 7.6 PO...

CVE-2010-0109

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

Cross site request forgery (csrf)

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

CVE-2010-0109

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

CVE-2010-0109

CVE-2010-0109 affects Symantec/Altiris Deployment Solution 6.9.x prior to DS 6.9 SP4. The DBManager component can crash via a crafted CreateSession or PXEManagerSignOn request, yielding a remote DoS. Exploitation potential is described as remote and network-adjacent, with impact on availability (...

CVE-2010-0109: Improper Restriction of Operations within the Bounds of a Memory Buffer

DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request...

PT-2018-4026

Name of the Vulnerable Software and Affected Versions Symantec Altiris Deployment Solution versions 6.9.x before 6.9 SP4 Description The issue allows remote attackers to cause a denial of service via a crafted request. Recommendations For Symantec Altiris Deployment Solution versions 6.9.x before...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

Design/Logic Flaw

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

CVE-2016-2202

The CVE-2016-2202 issue affects Symantec ITMS (Inventory Solution component in the Management Agent on the client). The vulnerability allows a local user to bypass the inventory’s application-denial/blacklist functionality, effectively bypassing policy to run unauthorized applications. The root c...

CVE-2016-2202

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

PT-2016-5063

Name of the Vulnerable Software and Affected Versions Symantec Altiris IT Management Suite versions through 7.6 HF7 Description The issue allows local users to bypass intended application-blacklist restrictions. Recommendations For Symantec Altiris IT Management Suite versions through 7.6 HF7,...

CVE-2016-2202: Undefined Security Weakness

The Inventory Solution component in the Management Agent in the client in Symantec Altiris IT Management Suite ITMS through 7.6 HF7 allows local users to bypass intended application-blacklist restrictions via unspecified vectors...

Symantec Altiris Agent 6.9 (Build 648) - Privilege Escalation Exploit

Exploit for windows platform in category local exploits / Exploit Title - Symantec Altiris Agent Arbitrary Write Privilege Escalation Date - 01st February 2015 Discovered by - Parvez Anwar @parvezghh Vendor Homepage - http://www.symantec.com Tested Version - 6.9 Build 648 Driver Version - No...