Lucene search
MitreCVE-2009-3110HistorySep 08, 2009 - 11:30 p.m.
CVE-2009-3110
2009-09-0823:30:00
CWE-362
mitre
web.nvd.nist.gov
29
symantec
altiris
deployment solution
cve-2009-3110
race condition
file transfer
security vulnerability
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
51.1%
Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.
Affected configurations
Node
symantecaltiris_deployment_solutionMatch6.9
ORsymantecaltiris_deployment_solutionMatch6.9sp1
ORsymantecaltiris_deployment_solutionMatch6.9.164
ORsymantecaltiris_deployment_solutionMatch6.9.176
ORsymantecaltiris_deployment_solutionMatch6.9.355
ORsymantecaltiris_deployment_solutionMatch6.9.355sp1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| symantec | altiris_deployment_solution | 6.9 | cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:* |
| symantec | altiris_deployment_solution | 6.9 | cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:* |
| symantec | altiris_deployment_solution | 6.9.164 | cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:* |
| symantec | altiris_deployment_solution | 6.9.176 | cpe:2.3:a:symantec:altiris_deployment_solution:6.9.176:*:*:*:*:*:*:* |
| symantec | altiris_deployment_solution | 6.9.355 | cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:*:*:*:*:*:*:* |
| symantec | altiris_deployment_solution | 6.9.355 | cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:sp1:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2009-3110
2009-09-08 23:00:00
prion
prion
Race condition
2009-09-08 23:30:00
nvd
nvd
CVE-2009-3110
2009-09-08 23:30:00
nessus
nessus
symantec
symantec
Symantec Altiris Deployment Solution Multiple Vulnerabilities
2009-08-26 08:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:N/A:P
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
51.1%
Related for CVE-2009-3110