CVE-2009-3108

Published: Sep 8, 2009Modified: Apr 23, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

The Aclient GUI in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 installs a client executable with insecure permissions (Everyone:Full Control), which allows local users to gain privileges by replacing the executable with a Trojan horse program.

Affected (6)

Products: Symantec: Altiris Deployment Solution

Symantec

1 product

Altiris Deployment Solution

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Symantec Altiris Deployment Solution	Version 6.9.164
Symantec Altiris Deployment Solution	Version 6.9.176
Symantec Altiris Deployment Solution	Version 6.9.355
Symantec Altiris Deployment Solution	Version 6.9.355 sp1
Symantec Altiris Deployment Solution	Version 6.9
Symantec Altiris Deployment Solution	Version 6.9 sp1