PT-2008-3295 · Symantec · Symantec Altiris Deployment Solution

Publicado 2008-04-11 · Atualizado 2017-08-08 · CVE-2008-1754

Positive Technologies (AI Summary)

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symantec Altiris Deployment Solution versions prior to 6.9.164

Description The issue allows local users to obtain sensitive information by dumping the AClient.exe process memory, as the Deployment Solution Agent password is stored in cleartext in memory.

Recommendations For versions prior to 6.9.164, update to version 6.9.164 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2008-1754

Produtos afetados

Symantec Altiris Deployment Solution

Referências · 8

• http://securityfocus.com/bid/28707 · Nota
• http://osvdb.org/44388 · Nota
• http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html · Correção
• http://securitytracker.com/id?1019825 · Nota
• http://vupen.com/english/advisories/2008/1197/references · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41771 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1754 · Nota de Segurança
• http://secunia.com/advisories/29771 · Aviso do Fabricante