CVE-2008-2287

Description

Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.

Affected products

• Symantec / altiris_deployment_solution6.8 – 6.8
• Symantec / altiris_deployment_solution6.9 – 6.9

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/42442
• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2008/1542/references
• MAILING_LISThttp://marc.info/?l=bugtraq&m=122167472229965&w=2
• MAILING_LISThttp://marc.info/?l=bugtraq&m=122167472229965&w=2
• MISChttp://www.securityfocus.com/bid/29197
• MISChttp://www.symantec.com/avcenter/security/Content/2008.05.14a.html
• MISChttp://www.securitytracker.com/id?1020024
• VENDOR_ADVISORYhttp://secunia.com/advisories/30261