Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*

part: a version: 6.9 update: sp1

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductAltiris Deployment Solution (209c89ae-4eaa-5d26-8a8d-7872f71707ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0109 vulnerable 2026-06-08 04:51:52.997692 Details available
DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request.
Published: 2018-02-19T19:00:00.000Z
Updated: 2024-08-07T00:37:53.935Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3110 vulnerable 2026-06-08 04:51:32.377667 Details available
Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.
Published: 2009-09-08T23:00:00.000Z
Updated: 2024-08-07T06:14:55.566Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3109 vulnerable 2026-06-08 04:51:32.377300 Details available
Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending "alternate commands" before the handshake is completed.
Published: 2009-09-08T23:00:00.000Z
Updated: 2024-08-07T06:14:56.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3108 vulnerable 2026-06-08 04:51:32.376889 Details available
The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.
Published: 2009-09-08T23:00:00.000Z
Updated: 2024-08-07T06:14:55.700Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3107 vulnerable 2026-06-08 04:51:32.376538 Details available
Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.
Published: 2009-09-08T23:00:00.000Z
Updated: 2024-08-07T06:14:56.367Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3033 vulnerable 2026-06-08 04:51:31.982815 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3031 vulnerable 2026-06-08 04:51:31.958614 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3028 vulnerable 2026-06-08 04:51:31.938198 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.