PT-2008-4234 · Symantec · Symantec Altiris Notification Server

Published 2008-06-20 · Updated 2017-08-08 · CVE-2008-2794

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Symantec Altiris Notification Server Agent versions prior to 6.0 SP3 R8

Description The issue concerns an unspecified vulnerability in the GUI of Symantec Altiris Notification Server Agent, allowing local users to gain privileges through unknown attack vectors.

Recommendations For versions prior to 6.0 SP3 R8, update to version 6.0 SP3 R8 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-2794

Affected Products

Symantec Altiris Notification Server

References · 7

• http://securityresponse.symantec.com/avcenter/security/Content/2008.06.17.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-2794 · Security Note
• http://secunia.com/advisories/30741 · Vendor Advisory
• http://securityfocus.com/bid/29708 · Note
• http://vupen.com/english/advisories/2008/1861/references · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43154 · Note
• http://securitytracker.com/id?1020304 · Note