low1.7
CVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local user…
Impact
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symantec | Altiris Deployment Solution | through 6.8 Versions 6.8, 6.8.380 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/29771
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
- http://www.osvdb.org/44388
- http://www.securityfocus.com/bid/28707
- http://www.securitytracker.com/id?1019825
- http://www.vupen.com/english/advisories/2008/1197/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41771
- http://secunia.com/advisories/29771
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
- http://www.osvdb.org/44388
- http://www.securityfocus.com/bid/28707
- http://www.securitytracker.com/id?1019825
- http://www.vupen.com/english/advisories/2008/1197/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41771