EUVD-2013-4850

Malware in sbrugna...

CVE-2013-5008

The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to obtain sensitive...

Code injection

The agent and task-agent components in Symantec Management Platform 7.0 and 7.1 before 7.1 SP2 Mp1.1v7 rollup, as used in certain Altiris products, use the same registry-entry encryption key across different customers' installations, which makes it easier for local users to obtain sensitive...

CVE-2013-5008

The CVE-2013-5008 issue affects Symantec Management Platform (Altiris) Agent/Task Agent in versions 7.0 and 7.1 prior to 7.1 SP2 MP1.1v7 rollup. The root cause is a single registry-entry encryption key shared across different customer installations, enabling a local user to access package-server ...

Symantec Management Platform Agent Static Service Key

SUMMARY The Symantec Management Platform agent and task agent installs a registry service key that is used to retrieve software packages from package servers. The registry key is locally accessible and can potentially be extracted and decrypted by an authorized local user using a static key commo...