Detections
Analytics
Altiris Notification Server Agent GUI Local Privilege Escalation (KB 39159)
high Nessus Plugin ID 33225
Synopsis
The remote Windows host contains a program that is affected by a local privilege escalation vulnerability.Description
Altiris Notification Server Agent, also known as Altiris Agent, is installed on the remote host, allowing it to be managed by an Altiris Notification Server.The installed version of the Altiris Agent is reportedly vulnerable to a Shatter Attack involving its GUI that can allow local users to escalate their privileges.
Solution
Retrieve the patch Altiris_NS_6_0_SP3_KB39159.exe and use that to upgrade all agent machines from the Notification Server.See Also
Plugin Details
Severity: High
ID: 33225
File Name: altiris_aexnsagent_priv_escalation2.nasl
Version: 1.14
Type: local
Agent: windows
Family: Windows
Published: 6/20/2008
Updated: 11/15/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.2
Temporal Score: 5.3
Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
Required KB Items: SMB/Registry/Enumerated
Exploit Ease: No known exploits are available
Reference Information
CVE: CVE-2008-2794
BID: 29708