CVE-2007-4380 - Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gai

CVE-2007-4380

Summary

Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer.

References

Vulnerable Configurations

cpe:2.3:a:symantec:altiris_deployment_solution:-:*:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_deployment_solution:-:*:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:-:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:-:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp2:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp2:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 29-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	25232
confirm	http://securityresponse.symantec.com/avcenter/security/Content/2007.08.13.html
misc	http://www.irmplc.com/index.php/111-Vendor-Alerts http://www.irmplc.com/index.php/152-Advisory-022
sectrack	1018552
secunia	26435
vupen	ADV-2007-2879
xf	symantec-altiris-log-privilege-escalation(36004)

Last major update

29-07-2017 - 01:32

Published

16-08-2007 - 18:17

Last modified

29-07-2017 - 01:32