Altiris Deployment Solution Server DB Manager Unauthenticated Command Execution

High Nessus Plugin ID 40822


The remote Windows host has a program that is affected by a security bypass vulnerability.


The remote host is running a vulnerable version of Altiris Deployment Solution Server. Authentication is not required prior to sending commands to the DB Manager service. A remote attacker could exploit this to modify or read data from the Altiris database.


Upgrade to Altiris Deployment Solution Server 6.9.430 or later.

See Also

Plugin Details

Severity: High

ID: 40822

File Name: altiris_ds_dbmanager_security_bypass.nasl

Version: $Revision: 1.9 $

Type: remote

Agent: windows

Family: Windows

Published: 2009/08/31

Modified: 2015/09/24

Dependencies: 25897

Risk Information

Risk Factor: High


Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

Exploit Available: false

Exploit Ease: No known exploits are available

Exploited by Nessus: true

Patch Publication Date: 2009/08/26

Vulnerability Publication Date: 2009/08/26

Reference Information

CVE: CVE-2009-3107

BID: 36110

OSVDB: 57458

Secunia: 36502

CWE: 264