← Voltar para CVEs

CVE-2009-3109

N/A

Descricao

Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending "alternate commands" before the handshake is completed.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado9/8/2009

Ultima modificacao4/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

symantec:altiris_deployment_solution

Referencias

http://secunia.com/advisories/36502(cve@mitre.org)

http://www.securityfocus.com/bid/36112(cve@mitre.org)

http://www.securitytracker.com/id?1022779(cve@mitre.org)

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00(cve@mitre.org)

http://secunia.com/advisories/36502(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/36112(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id?1022779(af854a3a-2127-422b-91ae-364da2661108)

http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.