Unscored severity · published May 18, 2008
CVE-2008-2286
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via…
–
CVSS
32.7%
EPSS
No
On KEV
Description
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
Exploitation
Is it being used?
Exploit prediction (EPSS)32.7% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Altiris Deployment Solution · Symantec
6.8; 6.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2286
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2286
marc.info
http://marc.info/?l=bugtraq&m=122167472229965&w=2
osvdb.org
http://osvdb.org/show/osvdb/45313
Vendor Advisory
http://secunia.com/advisories/30261
www.exploit-db.com
http://www.exploit-db.com/exploits/29552
www.securityfocus.com
http://www.securityfocus.com/archive/1/492127/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/492229/100/0/threaded
More from Altiris Deployment Solution
7.8
CVE-2008-6828
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges…
7.8
CVE-2008-6827
The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute…
6.5
CVE-2010-0109
DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request
–
CVE-2009-3028
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management…
–
CVE-2009-3033
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment…