AD
Product
Altiris Deployment Solution
24
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add Altiris Deployment Solution to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-6828 | 7.8 | Jun 8 | Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges… Affected: before 6.9.355; 6.9.355 |
| CVE-2008-6827 | 7.8 | Jun 8 | The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute… Affected: 6.0 before 6.9.355; 6.9.355 |
| CVE-2010-0109 | 6.5 | Feb 19 | DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request Affected: 6.9; 6.9; 6.9; 6.9; 6.9.164; 6.9.176; +1 more |
| CVE-2009-3028 | – | Mar 7 | The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management… Affected: 6.9; 6.9; 6.9; 6.9; 6.9 |
| CVE-2009-3033 | – | Nov 25 | Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment… Affected: 6.9; 6.9; 6.9; 6.9; 6.9.164; 6.9.176; +2 more |
| CVE-2009-3031 | – | Nov 3 | Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris… Affected: 6.9; 6.9; 6.9; 6.9 |
| CVE-2009-3179 | – | Sep 11 | Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to execute arbitrary code via unknown client-side attack vectors, as… Affected: 6.9 |
| CVE-2009-3178 | – | Sep 11 | Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a denial of service via unknown attack vectors, as demonstrated by… Affected: 6.9 |
| CVE-2009-3110 | – | Sep 8 | Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and… Affected: 6.9; 6.9; 6.9.164; 6.9.176; 6.9.355; 6.9.355 |
| CVE-2009-3109 | – | Sep 8 | Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a… Affected: 6.9; 6.9; 6.9 |
| CVE-2009-3108 | – | Sep 8 | The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows… Affected: 6.9; 6.9; 6.9.164; 6.9.176; 6.9.355; 6.9.355 |
| CVE-2009-3107 | – | Sep 8 | Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote… Affected: 6.9; 6.9; 6.9 |
| CVE-2008-4564 | – | Mar 18 | Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes, Symantec Mail Security (SMS) products, Symantec BrightMail… Affected: All versions, or not specified |
| CVE-2008-2289 | – | May 18 | Unspecified vulnerability in a tooltip element in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack… Affected: 6.0; 6.5.248; 6.5.299; 6.8; 6.8.378; 6.8.380.0; +4 more |
| CVE-2008-2287 | – | May 18 | Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing… Affected: 6.8; 6.9 |
| CVE-2008-2290 | – | May 18 | Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown… Affected: 6.8; 6.9 |
| CVE-2008-2291 | – | May 18 | axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote… Affected: 6.9 before 6.9.176; 6.8; 6.8; 6.8 |
| CVE-2008-2286 | – | May 18 | SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via… Affected: 6.8; 6.9 |
| CVE-2008-2288 | – | May 18 | Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to… Affected: 6.8; 6.9 |
| CVE-2008-1754 | – | Apr 11 | Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain… Affected: through 6.8; 6.8; 6.8.380 |
| CVE-2008-1473 | – | Mar 24 | The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a "Shatter" style attack Affected: 6.8; 6.8; 6.8; 6.8.282; 6.8.378; 6.8.380; +1 more |
| CVE-2007-5838 | – | Nov 6 | Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment… Affected: 6; 6.8; 6.8; 6.8 |
| CVE-2007-5555 | – | Oct 18 | Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials… Affected: 6 |
| CVE-2007-4380 | – | Aug 16 | Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer Affected: through 6.8.282 |
Showing 24