The remote host is running a vulnerable version of Altiris Deployment Solution Server.  Authentication is not required prior to sending commands to the DB Manager service.  A remote attacker could exploit this to modify or read data from the Altiris database.

The version of Altiris Deployment Solution installed on the remote host is reportedly affected by the following vulnerabilities :

  - DBManager authentication can by bypassed.  A remote     attacker could exploit this to execute arbitrary database     queries. (CVE-2009-3107)

  - The Aclient GUI has a privilege escalation vulnerability.
    This could allow an unprivileged user to compromise the     client. (CVE-2009-3108)

  - When key-based authentication is being used, it is possible     to issue commands to an agent before the handshake is     completed.  A malicious server could exploit this to execute     arbitrary commands as SYSTEM. (CVE-2009-3109)

  - Due to a race condition, a malicious user could intercept     a file transfer meant for a legitimate client.  This could     result in the disclosure of sensitive information, or a denial     of service. (CVE-2009-3110)

據稱遠端主機上安裝的 Altiris Deployment Solution 版本受到以下弱點影響：

  - 攻擊者可繞過 DBManager 驗證。遠端攻擊者可利用此弱點來執行任意資料庫查詢。(CVE-2009-3107)

  - Aclient GUI 存有權限提升弱點。
    這讓無權限的使用者可以入侵用戶端。(CVE-2009-3108)

  - 使用金鑰型驗證時，可在交握完成前發出命令給代理程式。惡意伺服器可利用此弱點，以 SYSTEM 權限執行任意命令。(CVE-2009-3109)

  - 由於存在爭用情形，惡意使用者可攔截要傳輸給合法用戶端的檔案。這可導致敏感資訊洩漏或拒絕服務。(CVE-2009-3110)

遠端主機正在執行存有弱點的 Altiris Deployment Solution Server 版本。無須驗證即可傳送命令至 DB Manager 服務。遠端攻擊者可惡意利用此弱點，藉此修改或讀取來自 Altiris 資料庫的資料。

リモートホストが実行しているバージョンの Altiris Deployment Solution Server に脆弱性があります。DB Manager サービスにコマンドを送信する前に認証は必要ではありません。リモートの攻撃者はこれを悪用することで、Altiris データベースのデータを変更するか、読み取ることがあります。

リモートホストにインストールされているバージョンの Altiris Deployment Solution は、報告されているところによれば、以下の脆弱性の影響を受けます。

  - DBManager 認証をバイパスできます。A remote attacker could exploit this to execute arbitrary database queries. (CVE-2009-3107)

  - Aclient GUI に、権限昇格の脆弱性があります。
    This could allow an unprivileged user to compromise the client. (CVE-2009-3108)

  - キーベースの認証が使用されている場合、ハンドシェイクが完了する前に、エージェントにコマンドを発行することができます。A malicious server could exploit this to execute arbitrary commands as SYSTEM. (CVE-2009-3109)

  - 競合状態があるため、悪意のあるユーザーが、正当なクライアントに向けられたファイル転送を傍受する可能性があります。This could result in the disclosure of sensitive information, or a denial of service. (CVE-2009-3110)

远程主机正在运行易受攻击的 Altiris Deployment Solution Server 版本。将命令发送到 DB Manager 服务前，不需要进行认证。远程攻击者可利用这一点来修改或读取 Altiris 数据库的数据。

有报告称远程主机上安装的 Altiris Deployment Solution 版本受到以下漏洞的影响：

  - 可以绕过 DBManager 认证。远程攻击者可利用此漏洞执行任意数据库查询。(CVE-2009-3107)

  - Aclient GUI 存在一个权限升级漏洞。
    非特权用户可利用此漏洞，入侵客户端。(CVE-2009-3108)

  - 使用基于密钥的认证时，可能会在握手完成前将命令发布给代理。恶意服务器可利用此漏洞，以 SYSTEM 身份执行任意命令。(CVE-2009-3109)

  - 由于争用条件，恶意用户可拦截用于合法客户端的文件传输。此漏洞可导致敏感信息泄露，或拒绝服务。(CVE-2009-3110)

The version of Altiris Deployment Solution installed on the remote host is earlier than 6.9 SP3 Build 430.  Such versions are potentially affected by multiple issues : 

  - An authentication bypass vulnerability when 'DBManager' authentication is used.

  - An authentication-bypass vulnerability caused by a race condition when files are transfered from the server to a client.

 A local privilege escalation vulnerability in the 'Aclient' client GUI. 

  - A race-condition exists in the 'AClient' client application that an attacker can exploit to execute malicious commands with SYSTEM-level privileges.

ID	Name	Product	Family	Published	Updated	Severity
40822	Altiris Deployment Solution Server DB Manager Unauthenticated Command Execution	Nessus	Windows	8/31/2009	11/15/2018	high
43828	Altiris Deployment Solution Server < 6.9.430 Multiple Vulnerabilities (SYM09-011)	Nessus	Windows	1/8/2010	11/15/2018	high
43828	Altiris Deployment Solution Server < 6.9.430 多個弱點 (SYM09-011)	Nessus	Windows	1/8/2010	11/15/2018	high
40822	Altiris Deployment Solution Server DB Manager 未經驗證的命令執行	Nessus	Windows	8/31/2009	11/15/2018	high
40822	Altiris Deployment Solution Server の DB Manager での未認証コマンドの実行	Nessus	Windows	8/31/2009	11/15/2018	high
43828	Altiris Deployment Solution Server < 6.9.430 Multiple Vulnerabilities (SYM09-011)	Nessus	Windows	1/8/2010	11/15/2018	high
40822	Altiris Deployment Solution Server DB Manager 未经认证的命令执行	Nessus	Windows	8/31/2009	11/15/2018	high
43828	Altiris Deployment Solution Server < 6.9.430 多个漏洞 (SYM09-011)	Nessus	Windows	1/8/2010	11/15/2018	high
5143	Altiris Deployment Solution 6.9.x < 6.9.430 Multiple Vulnerabilities	Nessus Network Monitor	Generic	8/27/2009	3/6/2019	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high