PT-2009-5437 · Symantec · Symantec Altiris Deployment Solution

Published 2009-09-08 · Updated 2013-02-07 · CVE-2009-3110

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Symantec Altiris Deployment Solution versions 6.9.x before 6.9 SP3 Build 430

Description: The issue is related to a race condition in the file transfer functionality. This allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.

Recommendations: For Symantec Altiris Deployment Solution versions 6.9.x before 6.9 SP3 Build 430, update to 6.9 SP3 Build 430 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2009-3110

Affected Products

Symantec Altiris Deployment Solution

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2009-3110 · Security Note
• http://secunia.com/advisories/36502 · Vendor Advisory
• http://securityfocus.com/bid/36113 · Note
• http://securitytracker.com/id?1022779 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00 · Note