Approved changes feed: RSS · Atom

cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*

part: a version: 6.8 update: sp1

VendorSymantec (88d7b611-7ce9-5631-abc6-1312dc87ce23)
ProductAltiris Deployment Solution (209c89ae-4eaa-5d26-8a8d-7872f71707ba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-2291 vulnerable 2026-06-08 04:50:23.418848 Details available
axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.
Published: 2008-05-18T14:00:00.000Z
Updated: 2024-08-07T08:58:01.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1754 vulnerable 2026-06-08 04:50:21.720563 Details available
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Published: 2008-04-11T20:28:00.000Z
Updated: 2024-08-07T08:32:01.308Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1473 vulnerable 2026-06-08 04:50:20.631762 Details available
The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Shatter" style attack.
Published: 2008-03-24T22:00:00.000Z
Updated: 2024-08-07T08:24:41.937Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5838 vulnerable 2026-06-08 04:50:07.164056 Details available
Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380.
Published: 2007-11-06T19:00:00.000Z
Updated: 2024-08-07T15:47:00.556Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.