PT-2009-5437 · Symantec · Symantec Altiris Deployment Solution

Publicado 2009-09-08 · Atualizado 2013-02-07 · CVE-2009-3110

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Symantec Altiris Deployment Solution versions 6.9.x before 6.9 SP3 Build 430

Description: The issue is related to a race condition in the file transfer functionality. This allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.

Recommendations: For Symantec Altiris Deployment Solution versions 6.9.x before 6.9 SP3 Build 430, update to 6.9 SP3 Build 430 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2009-3110

Produtos afetados

Symantec Altiris Deployment Solution

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-3110 · Nota de Segurança
• http://securityfocus.com/bid/36113 · Nota
• http://secunia.com/advisories/36502 · Aviso do Fabricante
• http://securitytracker.com/id?1022779 · Nota
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00 · Nota