PT-2007-5561 · Symantec · Symantec Altiris Deployment Solution

Published 2007-08-16 · Updated 2017-07-29 · CVE-2007-4380

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Altiris Deployment Solution versions prior to 6.8 SP2 (6.8.378)

Description A local user can gain local System privileges via the Log File Viewer in the affected software.

Recommendations For versions prior to 6.8 SP2 (6.8.378), update to version 6.8 SP2 (6.8.378) or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-4380

Affected Products

Symantec Altiris Deployment Solution

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-4380 · Security Note
• http://securityresponse.symantec.com/avcenter/security/Content/2007.08.13.html · Patch
• http://securityfocus.com/bid/25232 · Patch
• http://secunia.com/advisories/26435 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36004 · Note
• http://vupen.com/english/advisories/2007/2879 · Note
• http://securitytracker.com/id?1018552 · Note
• http://irmplc.com/index.php/111-Vendor-Alerts · Note
• http://irmplc.com/index.php/152-Advisory-022 · Note