CVE-2009-3110
Summary
| CVE | CVE-2009-3110 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2009-09-08 23:30:00 UTC |
| Updated | 2013-02-07 04:21:00 UTC |
| Description | Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does. |
Risk And Classification
Problem Types: CWE-362
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Symantec | Altiris Deployment Solution | 6.9 | All | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9 | sp1 | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9.164 | All | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9.176 | All | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9.355 | All | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9.355 | sp1 | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9 | All | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9 | sp1 | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9.164 | All | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9.176 | All | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9.355 | All | All | All |
| Application | Symantec | Altiris Deployment Solution | 6.9.355 | sp1 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Symantec Altiris Deployment Solution Multiple Vulnerabilities - Secunia Advisories - Vulnerability Information - Secunia.com | SECUNIA | secunia.com | Vendor Advisory |
| SecurityTracker.com Archives - Symantec Altiris Deployment Solution Multiple Flaws Let Remote Users Modify the Configuration, Execute Arbitrary Commands, and Deny Service | SECTRACK | www.securitytracker.com | |
| Security Advisories Relating to Symantec Products - Symantec Altiris Deployment Solution Multiple Vulnerabilities - August 26, 2009 | Symantec | CONFIRM | www.symantec.com | |
| Symantec Altiris Deployment Solution File Transfer Authentication Bypass Vulnerability | BID | www.securityfocus.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.