Altiris Deployment Solution < 6.8 SP2 Aclient Log File Viewer Local Privilege Escalation

high Nessus Network Monitor Plugin ID 4180

Synopsis

The remote Windows host has a program that is prone to a local privilege escalation attack.

Description

The version of the Altiris Client Agent (aclient) installed on the remote host reportedly contains a flaw where local users can use the Log File Viewer to open or execute files on the affected host with SYSTEM privileges.

Solution

Upgrade to version 6.8 SP2 or higher.

Plugin Details

Severity: High

ID: 4180

Family: Generic

Published: 8/20/2007

Updated: 3/6/2019

Nessus ID: 25904

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Medium

Base Score: 6.8

Temporal Score: 5

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

CVSS v3

Risk Factor: High

Base Score: 7.8

Temporal Score: 6.8

Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:symantec:altiris_deployment_solution

Reference Information

CVE: CVE-2007-4380

BID: 25232

Detections

Analytics