Altiris Deployment Solution 6.9.x < 6.9.430 Multiple Vulnerabilities

High Nessus Network Monitor Plugin ID 5143

Synopsis

The remote Windows host is vulnerable to multiple attack vectors.

Description

The version of Altiris Deployment Solution installed on the remote host is earlier than 6.9 SP3 Build 430. Such versions are potentially affected by multiple issues :

- An authentication bypass vulnerability when 'DBManager' authentication is used.

- An authentication-bypass vulnerability caused by a race condition when files are transfered from the server to a client.

A local privilege escalation vulnerability in the 'Aclient' client GUI.

- A race-condition exists in the 'AClient' client application that an attacker can exploit to execute malicious commands with SYSTEM-level privileges.

Solution

Upgrade to Altiris Deployment Solution 6.9 SP3 Build 430

See Also

http://www.nessus.org/u?f914235e

Plugin Details

Severity: High

ID: 5143

File Name: 5143.prm

Family: Generic

Published: 2009/08/27

Modified: 2016/02/05

Dependencies: 4179

Nessus ID: 40822, 43828

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.9

Temporal Score: 5.8

Vector: CVSS2#AV:A/AC:M/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 7.5

Temporal Score: 6.5

Vector: CVSS3#AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Vulnerability Information

Patch Publication Date: 2009/08/26

Vulnerability Publication Date: 2009/08/26

Reference Information

CVE: CVE-2009-3107, CVE-2009-3108, CVE-2009-3109

BID: 36110, 36111, 36112, 36113

OSVDB: 57458, 57459, 57460, 57461