CVE-2008-6828 Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of t...
HighCVSS 7.8
EPSS 0.25%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec altiris deployment solution | < 6.9.355 | 6.9.355 |
| symantec altiris deployment solution | = 6.9.355 | No fix listed |
References
- 31773 broken-link third-party-advisory vendor-advisory
- securityresponse.symantec.com broken-link patch vendor-advisory
- 31767 broken-link third-party-advisory vdb-entry
- 1021072 broken-link third-party-advisory vdb-entry
- ADV-2008-2876 broken-link patch vdb-entry vendor-advisory
- symantec-ads-password-info-disclosure(46007) third-party-advisory vdb-entry