CVE-2009-3031

Опубликовано: 03 нояб. 2009

Источник: nvd

CVSS2: 9.3

EPSS Высокий

Описание

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument.

Ссылки

http://sotiriu.de/adv/NSOADV-2009-001.txt
Exploit
http://www.securityfocus.com/archive/1/507625/100/0/threaded
http://www.securityfocus.com/bid/36698
Exploit
Patch
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00
http://www.vupen.com/english/advisories/2009/3117
Patch
Vendor Advisory
https://kb.altiris.com/article.asp?article=49389&p=1
Vendor Advisory
https://kb.altiris.com/article.asp?article=49568&p=1
Vendor Advisory
http://sotiriu.de/adv/NSOADV-2009-001.txt
Exploit
http://www.securityfocus.com/archive/1/507625/100/0/threaded
http://www.securityfocus.com/bid/36698
Exploit
Patch
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00
http://www.vupen.com/english/advisories/2009/3117
Patch
Vendor Advisory
https://kb.altiris.com/article.asp?article=49389&p=1
Vendor Advisory
https://kb.altiris.com/article.asp?article=49568&p=1
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_management_platform:7.0:*:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_management_platform:7.0:sp1:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_notification_server:6.0:*:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_notification_server:6.0:*:sp1:*:*:*:*:*

cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r7:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_notification_server:7.0:*:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_notification_server:7.0:sp3:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.76853

Высокий

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-fq54-rqwh-5q9h

github

почти 4 года назад