Symantec Altiris Deployment Solution Authentication Handshake Race Condition Security Vulnerability

Bugtraq ID:	36112
Class:	Race Condition Error
CVE:	CVE-2009-3110
Remote:	Yes
Local:	No
Published:	Aug 26 2009 12:00AM
Updated:	Jan 07 2010 09:32PM
Credit:	Luke Jennings with MWRInfosecurity
Vulnerable:	Symantec Altiris Deployment Solution 6.9.355 SP1 Symantec Altiris Deployment Solution 6.9.355 Symantec Altiris Deployment Solution 6.9.176 Symantec Altiris Deployment Solution 6.9.164 Symantec Altiris Deployment Solution 6.9 SP1 Symantec Altiris Deployment Solution 6.9
Not Vulnerable:	Symantec Altiris Deployment Solution 6.9 SP3 Build 430

Symantec Altiris Deployment Solution Authentication Handshake Race Condition Security Vulnerability

Symantec Altiris Deployment Solution is prone to a race-condition security vulnerability.

Successful exploits will allow an attacker to execute malicious commands with SYSTEM-level privileges, which may lead to a complete compromise of the affected computer. Failed attacks will cause denial-of-service conditions.

Versions prior to Altiris Deployment Solution 6.9 SP3 Build 430 are vulnerable.

Symantec Altiris Deployment Solution Authentication Handshake Race Condition Security Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Symantec Altiris Deployment Solution Authentication Handshake Race Condition Security Vulnerability

Solution:
The vendor has released an advisory and fixes. Please see the references for details.

Symantec Altiris Deployment Solution Authentication Handshake Race Condition Security Vulnerability

References:

• Altiris Deployment Solution Homepage (Symantec)
  
• MWR Labs Advisories (MWR Labs)
  
• SYM09-011 Security Advisories Relating to Symantec Products - Symantec Altiris D (Symantec)