Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-3107

Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.

Published

2009-09-08T23:30:00.563

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.8 (MEDIUM)

CVSSv2 Vector

AV:A/AC:L/Au:N/C:P/I:P/A:N

Access Vector: ADJACENT_NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: NONE

Exploitability Score

6.5

Impact Score

4.9

Weaknesses

Type: Primary
CWE-287

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	symantec	altiris_deployment_solution	6.9	Yes
Application	symantec	altiris_deployment_solution	6.9	Yes
Application	symantec	altiris_deployment_solution	6.9	Yes

References

http://secunia.com/advisories/36502 Broken Link, Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/36110 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.securitytracker.com/id?1022779 Broken Link, Third Party Advisory, VDB Entry ([email protected])
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00 Broken Link ([email protected])
http://secunia.com/advisories/36502 Broken Link, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/36110 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1022779 Broken Link, Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00 Broken Link (af854a3a-2127-422b-91ae-364da2661108)