CVE-2007-3874 Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component (pxemtftp.exe) in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitr...
HighCVSS 7.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component (pxemtftp.exe) in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| altiris deployment solution | = 6.0 | No fix listed |
| altiris deployment solution | = 6.8 | No fix listed |
| altiris deployment solution | = 6.8-sp1 | No fix listed |
| altiris deployment solution | = 6.8-sp2 | No fix listed |
References
- 20071031 Symantec Altiris Deployment Solution TFTP/MTFTP Service Directory Traversal Vulnerability third-party-advisory
- 27412 third-party-advisory vendor-advisory
- 26266 vdb-entry
- 1018875 vdb-entry
- www.symantec.com patch
- ADV-2007-3673 vdb-entry
- symantec-altiris-directory-traversal(38178) vdb-entry