Vulnerabilities (CVE)

Filtered by vendor Symantec Subscribe
Filtered by product Altiris Deployment Solution
Total 24 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2009-3107 1 Symantec 1 Altiris Deployment Solution 2025-04-09 4.8 MEDIUM N/A
Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.
CVE-2009-3108 1 Symantec 1 Altiris Deployment Solution 2025-04-09 7.2 HIGH N/A
The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.
CVE-2009-3110 1 Symantec 1 Altiris Deployment Solution 2025-04-09 5.8 MEDIUM N/A
Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.
CVE-2010-0109 1 Symantec 1 Altiris Deployment Solution 2024-11-21 3.3 LOW 6.5 MEDIUM
DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request.