Altiris Deployment Solution Server < 6.9.355 Password Disclosure (SYM08-020)

Low Nessus Plugin ID 34964


The remote Windows host has a program that is affected by a password disclosure vulnerability.


The version of the Altiris Deployment Solution installed on the remote host reportedly is affected by a password disclosure vulnerability. Altiris Deployment Solution Server reportedly stores 'Application Identity Account password' in the system memory in plain-text. It may be possible for an authorized non-privileged user to retrieve this password and make unauthorized modifications to the client systems. The level of unauthorized access depends on the user group under which Application Identity Account was registered during installation


Upgrade to Altiris Deployment Solution 6.9 Build 355 or later.

See Also

Plugin Details

Severity: Low

ID: 34964

File Name: altiris_deployment_solution_server_6_9_355.nasl

Version: $Revision: 1.10 $

Type: remote

Agent: windows

Family: Windows

Published: 2008/11/25

Modified: 2016/05/04

Dependencies: 25897

Risk Information

Risk Factor: Low


Base Score: 2.1

Temporal Score: 1.8

Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N

Temporal Vector: CVSS2#E:ND/RL:OF/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Reference Information

CVE: CVE-2008-6828

BID: 31767

OSVDB: 54976

Secunia: 31773

CWE: 310