1. CVE-Search
  2. CVE-2007-5838
ID CVE-2007-5838
Summary Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380.
References
Vulnerable Configurations
  • cpe:2.3:a:symantec:altiris_deployment_solution:6:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:altiris_deployment_solution:6:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*
    cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*
  • cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*
    cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp1:*:*:*:*:*:*
  • cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp2:*:*:*:*:*:*
    cpe:2.3:a:symantec:altiris_deployment_solution:6.8:sp2:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 29-07-2017 - 01:33)
Impact:
Exploitability:
CWE CWE-16
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 26265
confirm http://www.symantec.com/avcenter/security/Content/2007.10.31a.html
misc
sectrack 1018876
secunia 27412
vupen ADV-2007-3673
xf symantec-altiris-browser-priv-escalation(38180)
Last major update 29-07-2017 - 01:33
Published 06-11-2007 - 19:46
Last modified 29-07-2017 - 01:33
Back to Top