Vulnerability Description
Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending "alternate commands" before the handshake is completed.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Symantec | Altiris Deployment Solution | 6.9 |
References
- http://secunia.com/advisories/36502Vendor Advisory
- http://www.securityfocus.com/bid/36112Patch
- http://www.securitytracker.com/id?1022779
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit
- http://secunia.com/advisories/36502Vendor Advisory
- http://www.securityfocus.com/bid/36112Patch
- http://www.securitytracker.com/id?1022779
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=securit
FAQ
What is CVE-2009-3109?
CVE-2009-3109 is a vulnerability with a CVSS score of 9.3 (HIGH). Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a cli...
How severe is CVE-2009-3109?
CVE-2009-3109 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2009-3109?
Check the references section above for vendor advisories and patch information. Affected products include: Symantec Altiris Deployment Solution.