PT-2009-5434 · Symantec · Symantec Altiris Deployment Solution

Published 2009-09-08 · Updated 2024-02-13 · CVE-2009-3107

Positive Technologies (AI Summary)

CVSS v2.0

4.8

Medium

Base vector

AV:A/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Symantec Altiris Deployment Solution versions 6.9.x before 6.9 SP3 Build 430

Description: The issue is related to improper access restriction to the listening port for the DBManager service. This allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.

Recommendations: For Symantec Altiris Deployment Solution versions 6.9.x before 6.9 SP3 Build 430, update to 6.9 SP3 Build 430 or later to resolve the issue. As a temporary workaround, consider restricting access to the DBManager service to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-3107

Affected Products

Symantec Altiris Deployment Solution

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-3107 · Security Note
• http://secunia.com/advisories/36502 · Vendor Advisory
• http://securityfocus.com/bid/36110 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00 · Note
• http://securitytracker.com/id?1022779 · Note