Altiris Deployment Solution
Approved changes feed: RSS · Atom
cpe:2.3:a:symantec:altiris_deployment_solution:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Symantec (88d7b611-7ce9-5631-abc6-1312dc87ce23) |
|---|---|
| Product | Altiris Deployment Solution (209c89ae-4eaa-5d26-8a8d-7872f71707ba) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-6828 |
vulnerable | 2026-06-08 04:51:04.909063 |
Details available
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.
Published: 2009-06-08T19:00:00.000Z
Updated: 2024-08-07T11:42:00.433Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6827 |
vulnerable | 2026-06-08 04:51:04.907851 |
Details available
The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack on the "command prompt" hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function.
Published: 2009-06-08T19:00:00.000Z
Updated: 2024-08-07T11:42:00.467Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4564 |
vulnerable | 2026-06-08 04:50:39.376889 |
Details available
Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.
Published: 2009-03-18T15:00:00.000Z
Updated: 2024-08-07T10:24:18.984Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-2291 |
vulnerable | 2026-06-08 04:50:23.418213 |
Details available
axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.
Published: 2008-05-18T14:00:00.000Z
Updated: 2024-08-07T08:58:01.691Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-4380 |
vulnerable | 2026-06-08 04:49:56.230177 |
Details available
Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer.
Published: 2007-08-16T18:00:00.000Z
Updated: 2024-08-07T14:53:55.678Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.