CVE-2007-5838 : Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows loca

Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380.

Published 2007-11-06 19:46:00

Updated 2017-07-29 01:33:54

Source MITRE

View at NVD, CVE.org

Products affected by CVE-2007-5838

Symantec » Altiris Deployment Solution » Version: 6
cpe:2.3:a:symantec:altiris_deployment_solution:6:*:*:*:*:*:*:*
Matching versions
Symantec » Altiris Deployment Solution » Version: 6.8
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*
Matching versions
Symantec » Altiris Deployment Solution » Version: 6.8 Update SP1
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*
Matching versions
Symantec » Altiris Deployment Solution » Version: 6.8 Update SP2
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp2:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-5838

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-5838

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2007-5838

CWE-16

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-5838

Jump to

Vulnerability Details : CVE-2007-5838

Products affected by CVE-2007-5838

Exploit prediction scoring system (EPSS) score for CVE-2007-5838

CVSS scores for CVE-2007-5838

CWE ids for CVE-2007-5838

References for CVE-2007-5838