CVE-2008-2287

high

Description

Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/42442

http://www.vupen.com/english/advisories/2008/1542/references

http://www.symantec.com/avcenter/security/Content/2008.05.14a.html

http://www.securitytracker.com/id?1020024

http://www.securityfocus.com/bid/29197

http://secunia.com/advisories/30261

http://marc.info/?l=bugtraq&m=122167472229965&w=2

Details

Source: Mitre, NVD

Published: 2008-05-18

Updated: 2025-04-09

Risk Information

CVSS v2

Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Severity: High

CVSS v3

Base Score: 7.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H