CVE-2009-3107

Опубликовано: 08 сент. 2009

Источник: nvd

CVSS2: 4.8

EPSS Низкий

Описание

Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.

Ссылки

http://secunia.com/advisories/36502
Broken Link
Vendor Advisory
http://www.securityfocus.com/bid/36110
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022779
Broken Link
Third Party Advisory
VDB Entry
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00
Broken Link
http://secunia.com/advisories/36502
Broken Link
Vendor Advisory
http://www.securityfocus.com/bid/36110
Broken Link
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1022779
Broken Link
Third Party Advisory
VDB Entry
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00
Broken Link

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*

cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00377

Низкий

4.8 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-fc3j-3f83-7fhr

github

почти 4 года назад