CVE-2009-3028

The CVE-2009-3028 entry concerns Symantec Altiris components (AeXNSPkgDLLib.dll) used in Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Management Platform 7.0.x. The AeXNSPkgDL.1 ActiveX control exposes an unsafe method, DownloadAndInstall, which can be abused to force the dow...

CVE-2013-5008

The CVE-2013-5008 issue affects Symantec Management Platform (Altiris) Agent/Task Agent in versions 7.0 and 7.1 prior to 7.1 SP2 MP1.1v7 rollup. The root cause is a single registry-entry encryption key shared across different customer installations, enabling a local user to access package-server ...