Unscored severity · published Mar 7, 2011
CVE-2009-3028
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management…
–
CVSS
42.6%
EPSS
No
On KEV
Description
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.
Exploitation
Is it being used?
Exploit prediction (EPSS)42.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Altiris Deployment Solution · Symantec
6.9; 6.9; 6.9; 6.9; 6.9 · source: NVD
AN
Altiris Notification Server · Symantec
6.0; 6.0; 6.0; 6.0; 6.0; 6.0; +12 more · source: NVD
MP
Management Platform · Symantec
7.0; 7.0; 7.0; 7.0; 7.0; 7.0; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2009-3028
CVE.org
https://www.cve.org/CVERecord?id=CVE-2009-3028
Vendor Advisory
http://secunia.com/advisories/36679
www.osvdb.org
http://www.osvdb.org/57893
Exploit
http://www.securityfocus.com/bid/36346
Patch
http://www.symantec.com/business/support/index?page=content&id=TECH44885
www.symantec.com
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090922_00
More from Altiris Deployment Solution
7.8
CVE-2008-6828
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges…
7.8
CVE-2008-6827
The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute…
6.5
CVE-2010-0109
DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request
–
CVE-2009-3033
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment…
–
CVE-2009-3031
Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris…