VulnerabilityModified
CVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
LOW 1.7EPSS 0.31%
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
- CVSS 2.0
- 1.7 LOWAV:L/AC:L/Au:S/C:P/I:N/A:N
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-310
- Affected
- symantec/altiris deployment solution
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/29771Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.htmlPatch
- http://www.osvdb.org/44388
- http://www.securityfocus.com/bid/28707
- http://www.securitytracker.com/id?1019825
- http://www.vupen.com/english/advisories/2008/1197/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41771
- http://secunia.com/advisories/29771Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.htmlPatch
- http://www.osvdb.org/44388
- http://www.securityfocus.com/bid/28707
- http://www.securitytracker.com/id?1019825
- http://www.vupen.com/english/advisories/2008/1197/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41771
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.