Altiris Notification Server
Approved changes feed: RSS · Atom
cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r8:*:*:*:*:*:*
part: a version: 6.0 update: sp3_r8
| Vendor | Symantec (88d7b611-7ce9-5631-abc6-1312dc87ce23) |
|---|---|
| Product | Altiris Notification Server (0ff87c10-0151-5a0f-87df-d05227143ec9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-3035 |
vulnerable | 2026-06-08 04:51:31.988651 |
Details available
The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credentials and certain discovery credentials, and stores this key on the Notification Server machine, which allows local users to obtain sensitive information and possibly execute arbitrary code by decrypting and using these credentials.
Published: 2010-02-02T16:25:00.000Z
Updated: 2024-08-07T06:14:56.392Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-3028 |
vulnerable | 2026-06-08 04:51:31.949467 |
Details available
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.
Published: 2011-03-07T20:00:00.000Z
Updated: 2024-08-07T06:14:55.381Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.