CVE-2008-2286 SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fiel...
HighCVSS 7.5
EPSS 32.7%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec altiris deployment solution | = 6.8 | No fix listed |
| symantec altiris deployment solution | = 6.9 | No fix listed |
References
- SSRT080115 vendor-advisory
- 45313 vdb-entry
- 30261 third-party-advisory vendor-advisory
- 29552 exploit
- 20080515 ZDI-08-024: Symantec Altiris Deployment Solution SQL Injection Vulnerability mailing-list
- 20080518 Insomnia : ISVA-080516.1 - Altiris Deployment Solution - SQL Injection mailing-list
- 29198 vdb-entry
- 1020024 vdb-entry
- www.symantec.com patch vendor-advisory
- ADV-2008-1542 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- symantec-altiris-axengine-sql-injection(42436) vdb-entry