Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.

The version of the Altiris Deployment Solution installed on the remote host reportedly is affected by several issues :

  - A SQL injection vulnerability that could allow a user     to run arbitrary code (CVE-2008-2286).

  - A remote attacker may be able to obtain encrypted     Altiris Deployment Solution domain credentials without     authentication (CVE-2008-2291).

  - A local user could leverage a GUI tooltip to access a     privileged command prompt (CVE-2008-2289).

  - A local user can modify or delete several registry keys     used by the application, resulting in unauthorized     access to system information or disruption of service     (CVE-2008-2288).

  - A local user with access to the install directory of     Deployment Solution could replace application     components, which might then run with administrative     privileges on an affected system (CVE-2008-2287).

The version of the Altiris Deployment Solution Agent installed on the remote host reportedly is affected by several issues :

  - A local user could access a privileged command prompt     via the Agent's user interface (CVE-2008-2290).

  - A local user could leverage a GUI tooltip to access a     privileged command prompt (CVE-2008-2289).

  - A local user can modify or delete several registry keys     used by the application, resulting in unauthorized     access to system information or disruption of service     (CVE-2008-2288).

  - A local user with access to the install directory of     Deployment Solution could replace application     components, which might then run with administrative     privileges on an affected system (CVE-2008-2287).

The version of the Altiris Deployment Solution installed on the remote host reportedly is affected by several issues :

  - A SQL injection vulnerability that could allow a user to run arbitrary code
  - A remote attacker may be able to obtain encrypted Altiris Deployment Solution domain credentials without authentication.
  - A local user could access a privileged command prompt via the Agent's user interface.
  - A local user could leverage a GUI tooltip to access a privileged command prompt.
  - A local user can modify or delete several registry keys used by the application, resulting in unauthorized access to system information or disruption of service.
  - A local user with access to the install directory of Deployment Solution could replace application components, which might then run with administrative privileges on an affected system.

ID	Name	Product	Family	Type	Severity
32323	Altiris Deployment Solution < 6.9.176 Multiple Vulnerabilities	Nessus	Windows	Remote	critical
32322	Altiris Deployment Solution Agent < 6.9.176 Multiple Local Vulnerabilities	Nessus	Windows	Local	high
4504	Altiris Deployment Solution < 6.9.176 Multiple Vulnerabilities	Nessus Network Monitor	Generic		high

Detections

Analytics

CVE-2008-2287

high

Tenable Plugins

critical

high

high