CVE-2008-2291

Published: May 18, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.

Affected (4)

Products: Symantec: Altiris Deployment Solution

1 product

Altiris Deployment Solution

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Symantec Altiris Deployment Solution	From 6.9 to 6.9.176
Symantec Altiris Deployment Solution	Version 6.8
Symantec Altiris Deployment Solution	Version 6.8 sp1
Symantec Altiris Deployment Solution	Version 6.8 sp2

Related CWEs

References (22)

http://marc.info/?l=bugtraq&m=122167472229965&w=2

Source: cve@mitre.org

Mailing ListThird Party Advisory

http://secunia.com/advisories/30261

Source: cve@mitre.org

Third Party Advisory

http://www.insomniasec.com/advisories/ISVA-080516.2.htm

Source: cve@mitre.org

Third Party Advisory

http://www.securityfocus.com/archive/1/492128/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/492228/100/0/threaded

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/29199

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1020024

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://www.symantec.com/avcenter/security/Content/2008.05.14a.html

Source: cve@mitre.org

PatchVendor Advisory

http://www.vupen.com/english/advisories/2008/1542/references

Source: cve@mitre.org

Third Party Advisory

http://www.zerodayinitiative.com/advisories/ZDI-08-025/

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/42437

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://marc.info/?l=bugtraq&m=122167472229965&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

http://secunia.com/advisories/30261

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.insomniasec.com/advisories/ISVA-080516.2.htm

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.securityfocus.com/archive/1/492128/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/492228/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/29199

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1020024

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.symantec.com/avcenter/security/Content/2008.05.14a.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.vupen.com/english/advisories/2008/1542/references

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.zerodayinitiative.com/advisories/ZDI-08-025/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/42437

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.