Vulnerability Details CVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.4%
CVSS Severity
CVSS v2 Score 1.7
References
- http://secunia.com/advisories/29771
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
- http://www.osvdb.org/44388
- http://www.securityfocus.com/bid/28707
- http://www.securitytracker.com/id?1019825
- http://www.vupen.com/english/advisories/2008/1197/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41771
- http://secunia.com/advisories/29771
- http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
- http://www.osvdb.org/44388
- http://www.securityfocus.com/bid/28707
- http://www.securitytracker.com/id?1019825
- http://www.vupen.com/english/advisories/2008/1197/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41771
Products affected by CVE-2008-1754
-
cpe:2.3:a:symantec:altiris_deployment_solution:6.8
-
cpe:2.3:a:symantec:altiris_deployment_solution:6.8.380