Vulnerability Description
Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Altiris Deployment Solution | < 6.9.355 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/31773Broken LinkVendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.htmlBroken LinkPatchVendor Advisory
- http://www.securityfocus.com/bid/31767Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1021072Broken LinkThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/2876Broken LinkPatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46007Third Party AdvisoryVDB Entry
- http://secunia.com/advisories/31773Broken LinkVendor Advisory
- http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.htmlBroken LinkPatchVendor Advisory
- http://www.securityfocus.com/bid/31767Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id?1021072Broken LinkThird Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/2876Broken LinkPatchVendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46007Third Party AdvisoryVDB Entry
FAQ
What is CVE-2008-6828?
CVE-2008-6828 is a vulnerability with a CVSS score of 7.8 (HIGH). Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of t...
How severe is CVE-2008-6828?
CVE-2008-6828 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-6828?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Altiris Deployment Solution.