Lucene search

K
cveMitreCVE-2008-1754
HistoryApr 11, 2008 - 9:05 p.m.

CVE-2008-1754

2008-04-1121:05:00
CWE-310
mitre
web.nvd.nist.gov
21
symantec
altiris
deployment solution
cve-2008-1754
aclient
password
cleartext
memory
vulnerability
nvd

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

0

Percentile

5.1%

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.

Affected configurations

Nvd
Node
symantecaltiris_deployment_solutionRange6.8sp2
OR
symantecaltiris_deployment_solutionMatch6.8sp1
OR
symantecaltiris_deployment_solutionMatch6.8.380
VendorProductVersionCPE
symantecaltiris_deployment_solution*cpe:2.3:a:symantec:altiris_deployment_solution:*:sp2:*:*:*:*:*:*
symantecaltiris_deployment_solution6.8cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*
symantecaltiris_deployment_solution6.8.380cpe:2.3:a:symantec:altiris_deployment_solution:6.8.380:*:*:*:*:*:*:*

CVSS2

1.7

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

0

Percentile

5.1%

Related for CVE-2008-1754