Detections
Analytics
Altiris Deployment Solution Server DB Manager Unauthenticated Command Execution
high Nessus Plugin ID 40822
Language:
Synopsis
The remote Windows host has a program that is affected by a security bypass vulnerability.Description
The remote host is running a vulnerable version of Altiris Deployment Solution Server. Authentication is not required prior to sending commands to the DB Manager service. A remote attacker could exploit this to modify or read data from the Altiris database.Solution
Upgrade to Altiris Deployment Solution Server 6.9.430 or later.See Also
Plugin Details
Severity: High
ID: 40822
File Name: altiris_ds_dbmanager_security_bypass.nasl
Version: 1.11
Type: remote
Agent: windows
Family: Windows
Published: 8/31/2009
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.0
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Exploit Ease: No known exploits are available
Exploited by Nessus: true
Patch Publication Date: 8/26/2009
Vulnerability Publication Date: 8/26/2009
Reference Information
CVE: CVE-2009-3107
BID: 36110