CVE-2008-2287 Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application compon...
HighCVSS 7.2
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec altiris deployment solution | = 6.8 | No fix listed |
| symantec altiris deployment solution | = 6.9 | No fix listed |
References
- SSRT080115 vendor-advisory
- 30261 third-party-advisory
- 29197 vdb-entry
- 1020024 vdb-entry
- www.symantec.com patch
- ADV-2008-1542 vdb-entry
- symantec-altiris-install-code-execution(42442) vdb-entry