CVE-2009-3107

2009-09-0823:30:00

CWE-287

[email protected]

web.nvd.nist.gov

CVSS2

4.8

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:P/A:N

AI Score

Confidence

Low

EPSS

0.002

Percentile

54.3%

JSON

Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.

Affected configurations

Nvd

Node

symantecaltiris_deployment_solutionMatch6.9

symantecaltiris_deployment_solutionMatch6.9sp1

symantecaltiris_deployment_solutionMatch6.9sp2

VendorProductVersionCPE
symantecaltiris_deployment_solution6.9cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*
symantecaltiris_deployment_solution6.9cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*
symantecaltiris_deployment_solution6.9cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
symantec	altiris_deployment_solution	6.9	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:::::::*
symantec	altiris_deployment_solution	6.9	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1::::::
symantec	altiris_deployment_solution	6.9	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2::::::