CVE-2008-1754 Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dump...
LowCVSS 1.7
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec altiris deployment solution | <= 6.8 | No fix listed |
| symantec altiris deployment solution | = 6.8-sp1 | No fix listed |
| symantec altiris deployment solution | = 6.8.380 | No fix listed |
References
- 29771 third-party-advisory vendor-advisory
- securityresponse.symantec.com patch
- 44388 vdb-entry
- 28707 vdb-entry
- 1019825 vdb-entry
- ADV-2008-1197 vdb-entry
- altiris-agent-aclient-info-disclosure(41771) vdb-entry