Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-3110

Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.

Published

2009-09-08T23:30:00.657

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.8 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: NONE
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

4.9

Weaknesses

Type: Primary
CWE-362

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	symantec	altiris_deployment_solution	6.9	Yes
Application	symantec	altiris_deployment_solution	6.9	Yes
Application	symantec	altiris_deployment_solution	6.9.164	Yes
Application	symantec	altiris_deployment_solution	6.9.176	Yes
Application	symantec	altiris_deployment_solution	6.9.355	Yes
Application	symantec	altiris_deployment_solution	6.9.355	Yes

References

http://secunia.com/advisories/36502 Vendor Advisory ([email protected])
http://www.securityfocus.com/bid/36113 ([email protected])
http://www.securitytracker.com/id?1022779 ([email protected])
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00 ([email protected])
http://secunia.com/advisories/36502 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
http://www.securityfocus.com/bid/36113 (af854a3a-2127-422b-91ae-364da2661108)
http://www.securitytracker.com/id?1022779 (af854a3a-2127-422b-91ae-364da2661108)
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00 (af854a3a-2127-422b-91ae-364da2661108)