Vulnerability Details : CVE-2008-2287
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
Products affected by CVE-2008-2287
- cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2008-2287
0.04%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 6 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2008-2287
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
---|---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2008-2287
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2008-2287
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/42442
-
http://marc.info/?l=bugtraq&m=122167472229965&w=2
-
http://www.symantec.com/avcenter/security/Content/2008.05.14a.html
Patch
-
http://www.securityfocus.com/bid/29197
-
http://www.vupen.com/english/advisories/2008/1542/references
-
http://www.securitytracker.com/id?1020024
Jump to