Detections
Analytics
Altiris AClient < 6.8.380 Local Vulnerabilities
high Nessus Plugin ID 27596
Synopsis
The remote Windows host has a program that is prone to multiple local attacks.Description
The version of the Altiris Client Agent (aclient) installed on the remote host contains a flaw in its browser option whereby a local user can open or execute files on the affected host with SYSTEM privileges.It also contains a directory traversal vulnerability that allows a local user to read privileged system files.
Solution
Upgrade to Altiris Deployment Solution version 6.8.380.0 or later.See Also
https://support.symantec.com/en_US/article.SYMSA1137.html
http://www.symantec.com/avcenter/security/Content/2007.10.31a.html
Plugin Details
Severity: High
ID: 27596
File Name: altiris_6_8_380.nasl
Version: 1.12
Type: local
Agent: windows
Family: Windows
Published: 10/31/2007
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2007-3874, CVE-2007-5838