CVE-2008-2794

Description

References

• secunia.com/advisories/30741 · Vendor Advisory
• securityresponse.symantec.com/avcenter/security/Content/2008.06.17.html · Patch
• securityfocus.com/bid/29708
• securitytracker.com/id
• vupen.com/english/advisories/2008/1861/references
• exchange.xforce.ibmcloud.com/vulnerabilities/43154

Altre vulnerabilità di altiris notification server

• CVE-2009-3028MEDIO 6.8The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification…
• CVE-2009-3035MEDIO 4.3The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credential…
• CVE-2009-3033CRITICO 9.3Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web con…
• CVE-2009-3031CRITICO 9.3Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSCo…
• CVE-2008-0716MEDIO 6.8The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatter" style attack.