CVE-2009-3033

Published: Nov 25, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.

Affected (16)

Products: Symantec: Altiris Deployment Solution, Altiris Management Platform, Altiris Notification Server

Symantec

3 products

Altiris Deployment Solution

Altiris Management Platform

Altiris Notification Server

Configuration A

16 vulnerable

Vulnerable Software	Affected Versions
Symantec Altiris Deployment Solution	Version 6.9.164
Symantec Altiris Deployment Solution	Version 6.9.176
Symantec Altiris Deployment Solution	Version 6.9.355
Symantec Altiris Deployment Solution	Version 6.9.355 sp1
Symantec Altiris Deployment Solution	Version 6.9
Symantec Altiris Deployment Solution	Version 6.9 sp1
Symantec Altiris Deployment Solution	Version 6.9 sp2
Symantec Altiris Deployment Solution	Version 6.9 sp3
Symantec Altiris Management Platform	Version 7.0
Symantec Altiris Management Platform	Version 7.0 sp1
Symantec Altiris Notification Server	Version 6.0
Symantec Altiris Notification Server	Version 6.0 sp1
Symantec Altiris Notification Server	Version 6.0 sp2
Symantec Altiris Notification Server	Version 6.0 sp3
Symantec Altiris Notification Server	Version 6.0 sp3_r7
Symantec Altiris Notification Server	Version 6.0_sp3