Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.

The version of the Altiris Deployment Solution installed on the remote host reportedly is affected by several issues :

  - A SQL injection vulnerability that could allow a user     to run arbitrary code (CVE-2008-2286).

  - A remote attacker may be able to obtain encrypted     Altiris Deployment Solution domain credentials without     authentication (CVE-2008-2291).

  - A local user could leverage a GUI tooltip to access a     privileged command prompt (CVE-2008-2289).

  - A local user can modify or delete several registry keys     used by the application, resulting in unauthorized     access to system information or disruption of service     (CVE-2008-2288).

  - A local user with access to the install directory of     Deployment Solution could replace application     components, which might then run with administrative     privileges on an affected system (CVE-2008-2287).

The version of the Altiris Deployment Solution Agent installed on the remote host reportedly is affected by several issues :

  - A local user could access a privileged command prompt     via the Agent's user interface (CVE-2008-2290).

  - A local user could leverage a GUI tooltip to access a     privileged command prompt (CVE-2008-2289).

  - A local user can modify or delete several registry keys     used by the application, resulting in unauthorized     access to system information or disruption of service     (CVE-2008-2288).

  - A local user with access to the install directory of     Deployment Solution could replace application     components, which might then run with administrative     privileges on an affected system (CVE-2008-2287).

The version of the Altiris Deployment Solution installed on the remote host reportedly is affected by several issues :

  - A SQL injection vulnerability that could allow a user to run arbitrary code
  - A remote attacker may be able to obtain encrypted Altiris Deployment Solution domain credentials without authentication.
  - A local user could access a privileged command prompt via the Agent's user interface.
  - A local user could leverage a GUI tooltip to access a privileged command prompt.
  - A local user can modify or delete several registry keys used by the application, resulting in unauthorized access to system information or disruption of service.
  - A local user with access to the install directory of Deployment Solution could replace application components, which might then run with administrative privileges on an affected system.

ID	Name	Product	Family	Severity
32323	Altiris Deployment Solution < 6.9.176 Multiple Vulnerabilities	Nessus	Windows	critical
32322	Altiris Deployment Solution Agent < 6.9.176 Multiple Local Vulnerabilities	Nessus	Windows	high
4504	Altiris Deployment Solution < 6.9.176 Multiple Vulnerabilities	Nessus Network Monitor	Generic	high

Detections

Analytics

CVE-2008-2288

medium

Tenable Plugins

critical

high

high