Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:sp1:*:*:*:*:*:*

part: a version: 6.9.355 update: sp1

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductAltiris Deployment Solution (209c89ae-4eaa-5d26-8a8d-7872f71707ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3110 vulnerable 2026-06-08 04:51:32.377734 Details available
Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.
Published: 2009-09-08T23:00:00.000Z
Updated: 2024-08-07T06:14:55.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3108 vulnerable 2026-06-08 04:51:32.376960 Details available
The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.
Published: 2009-09-08T23:00:00.000Z
Updated: 2024-08-07T06:14:55.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3033 vulnerable 2026-06-08 04:51:31.985745 Details available
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.
Published: 2009-11-25T16:00:00.000Z
Updated: 2024-08-07T06:14:55.496Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.