altiris_deployment_solution Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/altiris_deployment_solution/ Sun, 26 Feb 2023 09:11:43 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png altiris_deployment_solution Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/altiris_deployment_solution/ 32 32 CVE-2008-6828 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6828/ Sun, 26 Feb 2023 09:11:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6828/ Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

The post CVE-2008-6828 appeared first on CVE Vulnerability.

]]> Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

The post CVE-2008-6828 appeared first on CVE Vulnerability.

]]> CVE-2008-4564 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-4564/ Sun, 26 Feb 2023 09:10:36 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-4564/ Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

The post CVE-2008-4564 appeared first on CVE Vulnerability.

]]> Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail Appliance products, and Symantec Data Loss Prevention (DLP) products, allows remote attackers to execute arbitrary code via a crafted Word Perfect Document (WPD) file.

The post CVE-2008-4564 appeared first on CVE Vulnerability.

]]> CVE-2008-2286 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2286/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2286/ SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

The post CVE-2008-2286 appeared first on CVE Vulnerability.

]]> SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

The post CVE-2008-2286 appeared first on CVE Vulnerability.

]]> CVE-2008-2287 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2287/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2287/ Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.

The post CVE-2008-2287 appeared first on CVE Vulnerability.

]]> Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.

The post CVE-2008-2287 appeared first on CVE Vulnerability.

]]> CVE-2008-2288 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2288/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2288/ Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.

The post CVE-2008-2288 appeared first on CVE Vulnerability.

]]> Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.

The post CVE-2008-2288 appeared first on CVE Vulnerability.

]]> CVE-2008-2289 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2289/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2289/ Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2289 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2289 appeared first on CVE Vulnerability.

]]> CVE-2008-2290 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2290/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2290/ Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2290 appeared first on CVE Vulnerability.

]]> Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors.

The post CVE-2008-2290 appeared first on CVE Vulnerability.

]]> CVE-2008-2291 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2291/ Sun, 26 Feb 2023 09:09:26 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2291/ axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.

The post CVE-2008-2291 appeared first on CVE Vulnerability.

]]> axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.

The post CVE-2008-2291 appeared first on CVE Vulnerability.

]]> CVE-2008-1754 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1754/ Sun, 26 Feb 2023 09:09:10 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1754/ Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.

The post CVE-2008-1754 appeared first on CVE Vulnerability.

]]> Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.

The post CVE-2008-1754 appeared first on CVE Vulnerability.

]]> CVE-2008-1473 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-1473/ Sun, 26 Feb 2023 09:09:02 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-1473/ The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a “Shatter” style attack.

The post CVE-2008-1473 appeared first on CVE Vulnerability.

]]> The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a “Shatter” style attack.

The post CVE-2008-1473 appeared first on CVE Vulnerability.

]]>