Symantec Altiris Deployment Solution 6.9.355
Approved changes feed: RSS · Atom
cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:-:*:*:*:*:*:*
part: a version: 6.9.355 update: -
| Vendor | Symantec (88d7b611-7ce9-5631-abc6-1312dc87ce23) |
|---|---|
| Product | Altiris Deployment Solution (209c89ae-4eaa-5d26-8a8d-7872f71707ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-6828 |
vulnerable | 2026-06-08 04:51:04.909086 |
Details available
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.
Published: 2009-06-08T19:00:00.000Z
Updated: 2024-08-07T11:42:00.433Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6827 |
vulnerable | 2026-06-08 04:51:04.908577 |
Details available
The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack on the "command prompt" hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function.
Published: 2009-06-08T19:00:00.000Z
Updated: 2024-08-07T11:42:00.467Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.