Lucene search

[email protected]NVD:CVE-2009-3028

HistoryMar 07, 2011 - 9:00 p.m.

CVE-2009-3028

2011-03-0721:00:01

[email protected]

web.nvd.nist.gov

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.705

Percentile

98.1%

JSON

The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.

Affected configurations

Nvd

Node

symantecaltiris_deployment_solutionMatch6.9

symantecaltiris_deployment_solutionMatch6.9sp1

symantecaltiris_deployment_solutionMatch6.9sp2

symantecaltiris_deployment_solutionMatch6.9sp3

symantecaltiris_deployment_solutionMatch6.9sp4

Node

symantecaltiris_notification_serverMatch6.0

symantecaltiris_notification_serverMatch6.0sp1

symantecaltiris_notification_serverMatch6.0sp1_hf12

symantecaltiris_notification_serverMatch6.0sp2

symantecaltiris_notification_serverMatch6.0sp3

symantecaltiris_notification_serverMatch6.0sp3_r1

symantecaltiris_notification_serverMatch6.0sp3_r10

symantecaltiris_notification_serverMatch6.0sp3_r11

symantecaltiris_notification_serverMatch6.0sp3_r12

symantecaltiris_notification_serverMatch6.0sp3_r13

symantecaltiris_notification_serverMatch6.0sp3_r2

symantecaltiris_notification_serverMatch6.0sp3_r3

symantecaltiris_notification_serverMatch6.0sp3_r4

symantecaltiris_notification_serverMatch6.0sp3_r5

symantecaltiris_notification_serverMatch6.0sp3_r6

symantecaltiris_notification_serverMatch6.0sp3_r7

symantecaltiris_notification_serverMatch6.0sp3_r8

symantecaltiris_notification_serverMatch6.0sp3_r9

Node

symantecmanagement_platformMatch7.0

symantecmanagement_platformMatch7.0rc5

symantecmanagement_platformMatch7.0sp1

symantecmanagement_platformMatch7.0sp2

symantecmanagement_platformMatch7.0sp3

symantecmanagement_platformMatch7.0sp4

symantecmanagement_platformMatch7.0sp5

VendorProductVersionCPE
symantecaltiris_deployment_solution6.9cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*
symantecaltiris_deployment_solution6.9cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*
symantecaltiris_deployment_solution6.9cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*
symantecaltiris_deployment_solution6.9cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3:*:*:*:*:*:*
symantecaltiris_deployment_solution6.9cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp4:*:*:*:*:*:*
symantecaltiris_notification_server6.0cpe:2.3:a:symantec:altiris_notification_server:6.0:*:*:*:*:*:*:*
symantecaltiris_notification_server6.0cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1:*:*:*:*:*:*
symantecaltiris_notification_server6.0cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1_hf12:*:*:*:*:*:*
symantecaltiris_notification_server6.0cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2:*:*:*:*:*:*
symantecaltiris_notification_server6.0cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	altiris_deployment_solution	6.9	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:::::::*
symantec	altiris_deployment_solution	6.9	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1::::::
symantec	altiris_deployment_solution	6.9	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2::::::
symantec	altiris_deployment_solution	6.9	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3::::::
symantec	altiris_deployment_solution	6.9	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp4::::::
symantec	altiris_notification_server	6.0	cpe:2.3:a:symantec:altiris_notification_server:6.0:::::::*
symantec	altiris_notification_server	6.0	cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1::::::
symantec	altiris_notification_server	6.0	cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1_hf12::::::
symantec	altiris_notification_server	6.0	cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2::::::
symantec	altiris_notification_server	6.0	cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3::::::