Altiris Notification Server
Approved changes feed: RSS · Atom
cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1:*:*:*:*:*:*
part: a version: 6.0 update: sp1
| Vendor | Symantec (88d7b611-7ce9-5631-abc6-1312dc87ce23) |
|---|---|
| Product | Altiris Notification Server (0ff87c10-0151-5a0f-87df-d05227143ec9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-3035 |
vulnerable | 2026-06-08 04:51:31.988574 |
Details available
The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credentials and certain discovery credentials, and stores this key on the Notification Server machine, which allows local users to obtain sensitive information and possibly execute arbitrary code by decrypting and using these credentials.
Published: 2010-02-02T16:25:00.000Z
Updated: 2024-08-07T06:14:56.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3033 |
vulnerable | 2026-06-08 04:51:31.985853 |
Details available
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.
Published: 2009-11-25T16:00:00.000Z
Updated: 2024-08-07T06:14:55.496Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3028 |
vulnerable | 2026-06-08 04:51:31.940921 |
Details available
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.
Published: 2011-03-07T20:00:00.000Z
Updated: 2024-08-07T06:14:55.381Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.