Vulnerability Details : CVE-2009-3107
Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.
Vulnerability category: BypassGain privilege
Products affected by CVE-2009-3107
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-3107
0.17%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 53 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-3107
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.8
|
MEDIUM | AV:A/AC:L/Au:N/C:P/I:P/A:N |
6.5
|
4.9
|
NIST |
CWE ids for CVE-2009-3107
-
Assigned by: nvd@nist.gov (Primary)
-
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-3107
-
http://www.securityfocus.com/bid/36110
Broken Link;Third Party Advisory;VDB Entry
-
http://www.securitytracker.com/id?1022779
GoDaddy Domain Name SearchBroken Link;Third Party Advisory;VDB Entry
-
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00
Security Updates DetailBroken Link
-
http://secunia.com/advisories/36502
About Secunia Research | FlexeraBroken Link;Vendor Advisory
Jump to