PT-2009-5369 · Symantec · Altiris Express Ns Console Utilities Activex Control+4

Published 2009-11-25 · Updated 2017-08-17 · CVE-2009-3033

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Symantec Altiris Deployment Solution versions 6.9.x Symantec Altiris Notification Server versions 6.0.x Symantec Management Platform versions 7.0.x

Description: The issue is related to a buffer overflow in the RunCmd method of the Altiris eXpress NS Console Utilities ActiveX control. This control is part of the web console in Symantec Altiris products. The buffer overflow can be triggered by a long string in the second argument, allowing remote attackers to execute arbitrary code.

Recommendations: For Symantec Altiris Deployment Solution versions 6.9.x, consider disabling the AeXNSConsoleUtilities.dll until a patch is available. For Symantec Altiris Notification Server versions 6.0.x, restrict access to the web console to minimize the risk of exploitation. For Symantec Management Platform versions 7.0.x, avoid using the RunCmd method with untrusted input until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-3033

Affected Products

Aexnsconsoleutilities.Dll

Altiris Express Ns Console Utilities Activex Control

Symantec Altiris Deployment Solution

Symantec Altiris Notification Server

Symantec Management Platform

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/symantec_altirisdeployment_runcmd.rb · Exploit
• 🔥 http://securityfocus.com/bid/37092 · Exploit
• 🔥 https://exploit-db.com/exploits/16528 · Exploit
• http://vupen.com/english/advisories/2009/3328 · Vendor Advisory
• https://kb.altiris.com/article.asp?article=50279&p=1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3033 · Security Note
• http://osvdb.org/60496 · Note
• https://kb.altiris.com/article.asp?article=50072&p=1 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54415 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091124_00 · Note