PT-2008-2334 · Symantec+1 · Symantec Altiris Notification Server+1

Publicado 2008-02-12 · Atualizado 2011-03-08 · CVE-2008-0716

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Altiris Notification Server versions prior to 6.0 SP3 R7

Description The issue allows local users to gain privileges via a "Shatter" style attack, which is a type of attack that exploits a vulnerability in the way Windows handles messages between applications. This can potentially lead to elevated access.

Recommendations For versions prior to 6.0 SP3 R7, update to Symantec Altiris Notification Server 6.0 SP3 R7 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2008-0716

Produtos afetados

Symantec Altiris Notification Server

Windows

Referências · 6

• http://vupen.com/english/advisories/2008/0444 · Nota
• http://securityfocus.com/bid/27645 · Correção
• http://secunia.com/advisories/28832 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-0716 · Nota de Segurança
• http://securitytracker.com/id?1019313 · Nota
• http://securityresponse.symantec.com/avcenter/security/Content/2008.02.06.html · Correção