CVE-2007-3874

The CVE-2007-3874 issue affects Symantec Altiris Deployment Solution 6.x PXE server’s tftp/mtftp daemon (pxemtftp.exe). A directory traversal vulnerability in the PXE server component could allow unauthenticated remote attackers to read arbitrary files on the Altiris server. Impact is read access...

CVE-2007-5838

Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380...

CVE-2007-5838: Undefined Security Weakness

Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380...

CVE-2007-3874: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component pxemtftp.exe in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors...

Symantec Altiris Deployment Solution Aclient进程本地权限提升漏洞

BUGTRAQ ID: 26265 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec的Altiris Deployment Solution产品中的Aclient进程是以本地系统权限运行的。通过使用浏览器选项，本地攻击者就可以以系统权限打开或执行系统上的任意文件。 Symantec Altiris Deployment Solution 6.x SP2 厂商补丁： Symantec -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Symantec Altris deployment solution directory traversal

Directory traversal in PXE with TFTP/MFTP protocols...

Symantec Altiris Deployment Solution目录遍历漏洞

BUGTRAQ ID: 26266 CVECAN ID: CVE-2007-3874 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec的Altiris Deployment Solution产品的可选PXE服务器组件中包含有tftp/mtftp服务程序，该服务程序中存在目录遍历漏洞。 如果用户提交了恶意请求的话，就可能允许未经认证的攻击者以SYSTEM权限下载系统上的任意文件。 Symantec Altiris Deployment Solution 6.x SP2...

Altiris AClient < 6.8.380 Local Vulnerabilities

The version of the Altiris Client Agent aclient installed on the remote host contains a flaw in its browser option whereby a local user can open or execute files on the affected host with SYSTEM privileges. It also contains a directory traversal vulnerability that allows a local user to read...

Altiris Deployment Solution Directory Traversal

SUMMARY Symantecs Altiris Deployment Solution is vulnerable to an elevation of privilege attack. Risk Impact Medium Remote Access | Yes ---|--- Local Access | Yes Authentication Required | Yes Exploit available | No AFFECTED PRODUCTS Affected Products Product | Version | Build | Solution...

CVE-2007-5555

Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials Information Leakage in Altiris Deployment Solution." NOTE: this description is based on a vague pre-advisory with no...

Design/Logic Flaw

Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials Information Leakage in Altiris Deployment Solution." NOTE: this description is based on a vague pre-advisory with no...

CVE-2007-5555

Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials Information Leakage in Altiris Deployment Solution." NOTE: this description is based on a vague pre-advisory with no...

CVE-2007-5555

Technical details for CVE-2007-5555 are not publicly available in the provided documents; no affected products, root cause, impact or fix are disclosed. Monitor for updates.

CVE-2007-5555: Exposure of Sensitive Information to an Unauthorized Actor

Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials Information Leakage in Altiris Deployment Solution." NOTE: this description is based on a vague pre-advisory with no...

CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include

X---- w w w . u N k n 0 w n . e u ----X CARE2X php Integ Hospital Info System 2G Deployment 2.2 Multi Remote File Include ::Home: http://care2x.org/ http://sourceforge.net/projects/care2002/ ::Vuln Type : Remote File Include RFI ::Discovered by : iNs ::Vuln Code: /language/en/encopyrite.php ?php...

Authentication flaw

The login method in LoginModule implementations in Apache Geronimo 2.0 does not throw FailedLoginException for failed logins, which allows remote attackers to bypass authentication requirements, deploy arbitrary modules, and gain administrative access by sending a blank username and password with...

Altiris Deployment Solution Client Detection

Binary data 4178.prm...

Altiris Deployment Solution < 6.8 SP2 Aclient Log File Viewer Local Privilege Escalation

Binary data 4180.prm...

Altiris Deployment Solution Server Detection

Binary data 4179.prm...

Altiris Deployment Solution Aclient Process (aclient.exe) Log File Viewer Local Privilege Escalation

The version of the Altiris Client Agent aclient installed on the remote host reportedly contains a flaw whereby local users can use the Log File Viewer to open or execute files on the affected host with SYSTEM privileges. C Tenable Network Security, Inc. include"compat.inc"; if description...