Symantec Altiris eXpress NS SC Download ActiveX Control Arbitrary File Download Vulnerability
BID:36346
Info
Symantec Altiris eXpress NS SC Download ActiveX Control Arbitrary File Download Vulnerability
| Bugtraq ID: | 36346 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-3028 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2009 12:00AM |
| Updated: | Oct 09 2009 08:29PM |
| Credit: | Reported in a Metasploit plugin |
| Vulnerable: |
Symantec Management Platform 7.0 SP1 Symantec Management Platform 7.0 Symantec Deployment Solution 6.9 SP3 Symantec Altiris Notification Server 6.0 SP3 R7 Symantec Altiris Notification Server 6.0 SP3 Symantec Altiris Notification Server 6.0 SP2 Symantec Altiris Notification Server 6.0 SP1 Symantec Altiris Notification Server 6.0 Symantec Altiris eXpress NS SC Download ActiveX Control 6.0.0.1418 Symantec Altiris Deployment Solution 6.9.355 SP1 Symantec Altiris Deployment Solution 6.9.355 Symantec Altiris Deployment Solution 6.9.176 Symantec Altiris Deployment Solution 6.9.164 Symantec Altiris Deployment Solution 6.9 SP3 Build 430 Symantec Altiris Deployment Solution 6.9 SP1 Symantec Altiris Deployment Solution 6.9 |
| Not Vulnerable: | |
Discussion
Symantec Altiris eXpress NS SC Download ActiveX Control Arbitrary File Download Vulnerability
Altiris eXpress NS SC Download ActiveX control is prone to a vulnerability that can allow malicious files to be downloaded and saved to arbitrary locations on an affected computer.
Attackers may exploit this issue to put malicious files in arbitrary locations and execute them within the context of the affected application that uses the affected control (typically Internet Explorer). Other attacks are also possible.
Altiris eXpress NS SC Download ActiveX control 6.0.0.1418 is vulnerable; other versions may also be affected. This control is installed with the following applications:
Altiris Deployment Solution
Altiris Notification Server
Symantec Management Platform
This vulnerability may be related to one of the issues described in BID 36247 (Symantec Altiris Deployment Solution Multiple Remote Vulnerabilities).
Altiris eXpress NS SC Download ActiveX control is prone to a vulnerability that can allow malicious files to be downloaded and saved to arbitrary locations on an affected computer.
Attackers may exploit this issue to put malicious files in arbitrary locations and execute them within the context of the affected application that uses the affected control (typically Internet Explorer). Other attacks are also possible.
Altiris eXpress NS SC Download ActiveX control 6.0.0.1418 is vulnerable; other versions may also be affected. This control is installed with the following applications:
Altiris Deployment Solution
Altiris Notification Server
Symantec Management Platform
This vulnerability may be related to one of the issues described in BID 36247 (Symantec Altiris Deployment Solution Multiple Remote Vulnerabilities).
Exploit / POC
Symantec Altiris eXpress NS SC Download ActiveX Control Arbitrary File Download Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
An exploit is available:
An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage.
A working commercial exploit is available through VUPEN Security - Exploit and PoCs Service. This exploit is not otherwise publicly available or known to be circulating in the wild.
An exploit is available:
Solution / Fix
Symantec Altiris eXpress NS SC Download ActiveX Control Arbitrary File Download Vulnerability
Solution:
Vendor hot-fixes are available. Please see the references for more information.
Solution:
Vendor hot-fixes are available. Please see the references for more information.
References
Symantec Altiris eXpress NS SC Download ActiveX Control Arbitrary File Download Vulnerability
References:
References:
- Altiris Knowledge Base article 49069 (Symantec)
- Microsoft Knowledge Base Article 240797 (Microsoft)
- Symantec Altiris Homepage (Symantec)
- SYM09-013 Symantec Altiris Deployment Solution and Notification Server Managemen (Symantec)