Vulnerability Details : CVE-2008-2286
Public exploit exists!
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
Vulnerability category: Sql Injection
Exploit prediction scoring system (EPSS) score for CVE-2008-2286
Probability of exploitation activity in the next 30 days: 30.19%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2008-2286
-
Symantec Altiris DS SQL Injection
Disclosure Date: 2008-05-15First seen: 2020-04-26exploit/windows/misc/altiris_ds_sqliThis module exploits a SQL injection flaw in Symantec Altiris Deployment Solution 6.8 to 6.9.164. The vulnerability exists on axengine.exe which fails to adequately sanitize numeric input fields in "UpdateComputer" notification Requests. In order to spawn a shell,
CVSS scores for CVE-2008-2286
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST |
CWE ids for CVE-2008-2286
-
The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component.Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-2286
-
http://www.exploit-db.com/exploits/29552
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/42436
-
http://www.zerodayinitiative.com/advisories/ZDI-08-024/
- http://marc.info/?l=bugtraq&m=122167472229965&w=2
-
http://www.securityfocus.com/bid/29198
Symantec Altiris Deployment Solution 'axengine.exe' SQL Injection Vulnerability
-
http://osvdb.org/show/osvdb/45313
-
http://www.symantec.com/avcenter/security/Content/2008.05.14a.html
Patch;Vendor Advisory
-
http://www.securityfocus.com/archive/1/492127/100/0/threaded
-
http://www.vupen.com/english/advisories/2008/1542/references
Vendor Advisory
-
http://www.securityfocus.com/archive/1/492229/100/0/threaded
- http://www.securitytracker.com/id?1020024
Products affected by CVE-2008-2286
- cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*