Unscored severity · published Apr 11, 2008
CVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain…
–
CVSS
0.3%
EPSS
No
On KEV
Description
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Altiris Deployment Solution · Symantec
through 6.8; 6.8; 6.8.380 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1754
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1754
Vendor Advisory
http://secunia.com/advisories/29771
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
www.osvdb.org
http://www.osvdb.org/44388
www.securityfocus.com
http://www.securityfocus.com/bid/28707
www.securitytracker.com
http://www.securitytracker.com/id?1019825
www.vupen.com
http://www.vupen.com/english/advisories/2008/1197/references
More from Altiris Deployment Solution
7.8
CVE-2008-6828
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges…
7.8
CVE-2008-6827
The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute…
6.5
CVE-2010-0109
DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request
–
CVE-2009-3028
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management…
–
CVE-2009-3033
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment…