CVE-2008-1754

2008-04-1120:28:00

mitre

www.cve.org

AI Score

5.9

Confidence

Low

EPSS

Percentile

5.1%

JSON

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.

References

secunia.com/advisories/29771

securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html

www.osvdb.org/44388

www.securityfocus.com/bid/28707

www.securitytracker.com/id?1019825

www.vupen.com/english/advisories/2008/1197/references

exchange.xforce.ibmcloud.com/vulnerabilities/41771