Altiris Deployment Solution 6.9.x < 6.9.430 Multiple Vulnerabilities

High Nessus Network Monitor Plugin ID 5143


The remote Windows host is vulnerable to multiple attack vectors.


The version of Altiris Deployment Solution installed on the remote host is earlier than 6.9 SP3 Build 430. Such versions are potentially affected by multiple issues :

- An authentication bypass vulnerability when 'DBManager' authentication is used.

- An authentication-bypass vulnerability caused by a race condition when files are transfered from the server to a client.

A local privilege escalation vulnerability in the 'Aclient' client GUI.

- A race-condition exists in the 'AClient' client application that an attacker can exploit to execute malicious commands with SYSTEM-level privileges.


Upgrade to Altiris Deployment Solution 6.9 SP3 Build 430

See Also

Plugin Details

Severity: High

ID: 5143

File Name: 5143.prm

Family: Generic

Published: 2009/08/27

Modified: 2016/02/05

Dependencies: 4179

Nessus ID: 40822, 43828

Risk Information

Risk Factor: High


Base Score: 7.9

Temporal Score: 5.8

Vector: CVSS2#AV:A/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C


Base Score: 7.5

Temporal Score: 6.5


Temporal Vector: CVSS3#E:U/RL:O/RC:C

Vulnerability Information

Patch Publication Date: 2009/08/26

Vulnerability Publication Date: 2009/08/26

Reference Information

CVE: CVE-2009-3107, CVE-2009-3108, CVE-2009-3109

BID: 36110, 36111, 36112, 36113

OSVDB: 57458, 57459, 57460, 57461