CVEvulnerability
CVE-2008-1754
1.7 LOW
Official page ↗
- Status
- Modified
- Published
- 2008-04-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 1.7 LOW — AV:L/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-310
Description
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Affected configurations
• symantec altiris deployment solution (<= 6.8)
• symantec altiris deployment solution 6.8
• symantec altiris deployment solution 6.8.380
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/29771 Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html Patch
- http://www.osvdb.org/44388 www.osvdb.org
- http://www.securityfocus.com/bid/28707 www.securityfocus.com
- http://www.securitytracker.com/id?1019825 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1197/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41771 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29771 Vendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html Patch
- http://www.osvdb.org/44388 www.osvdb.org
- http://www.securityfocus.com/bid/28707 www.securityfocus.com
- http://www.securitytracker.com/id?1019825 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1197/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41771 exchange.xforce.ibmcloud.com