Symantec Altiris Deployment Solution Multiple Remote Vulnerabilities
BID:36247
Info
Symantec Altiris Deployment Solution Multiple Remote Vulnerabilities
| Bugtraq ID: | 36247 |
| Class: | Unknown |
| CVE: |
CVE-2009-3178 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 03 2009 12:00AM |
| Updated: | Apr 13 2015 09:07PM |
| Credit: | Intevydis |
| Vulnerable: |
Symantec Altiris Deployment Solution 6.9 |
| Not Vulnerable: | |
Discussion
Symantec Altiris Deployment Solution Multiple Remote Vulnerabilities
Symantec Altiris Deployment Solution is prone to multiple remote vulnerabilities, including:
- An unspecified denial-of-service vulnerability.
- An information-disclosure vulnerability.
An attacker can exploit these issues to crash the affected application and retrieve potentially sensitive information.
Symantec Altiris 6.9 is vulnerable; other versions may also be affected.
NOTE (November 3, 2009): This document previously discussed four vulnerabilities, including two unspecified remote code-execution vulnerabilities. Those issues have been removed from this document because they are covered in BIDs 36346 (Symantec Altiris eXpress NS SC Download ActiveX Control Arbitrary File Download Vulnerability) and 36698 (Multiple Symantec Altiris Products ActiveX Control Buffer Overflow Vulnerability).
Symantec Altiris Deployment Solution is prone to multiple remote vulnerabilities, including:
- An unspecified denial-of-service vulnerability.
- An information-disclosure vulnerability.
An attacker can exploit these issues to crash the affected application and retrieve potentially sensitive information.
Symantec Altiris 6.9 is vulnerable; other versions may also be affected.
NOTE (November 3, 2009): This document previously discussed four vulnerabilities, including two unspecified remote code-execution vulnerabilities. Those issues have been removed from this document because they are covered in BIDs 36346 (Symantec Altiris eXpress NS SC Download ActiveX Control Arbitrary File Download Vulnerability) and 36698 (Multiple Symantec Altiris Products ActiveX Control Buffer Overflow Vulnerability).
Exploit / POC
Symantec Altiris Deployment Solution Multiple Remote Vulnerabilities
A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.
A working commercial exploit is available through Intevydis. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
Symantec Altiris Deployment Solution Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Symantec Altiris Deployment Solution Multiple Remote Vulnerabilities
References:
References:
- Altiris Deployment Solution Homepage (Symantec)
- Symantec ActiveX flaws (Intevydis)
- VulnDisco Pack Professional (Intevydis)