Tuesday, March 11, 2008 8:32 AM
cmosby
Symantec Altiris Deployment Solution Server Agent Privilege Escalation - Advisories - Secunia
Symantec Altiris Deployment Solution Server Agent Privilege Escalation
Secunia Advisory:
SA29319
Release Date:
2008-03-11
Critical:
Less critical
Impact:
Privilege escalation
Where:
Local system
Solution Status:
Vendor Patch
Software:
Altiris Deployment Solution 6.x
Description:
A vulnerability has been reported in Symantec Altiris Deployment Solution, which can be exploited by malicious, local users to gain escalated privileges.
The vulnerability is caused due to an error in the Symantec Altiris Deployment Solution Server Agent, which can be exploited via shatter attacks to execute arbitrary code with escalated privileges.
The vulnerability affects version 6.8.x (all builds).
Solution:
Update to version 6.9.164 (see vendor's advisory for details).
Provided and/or discovered by:
The vendor credits Brett Moore of Insomnia Security.
Original Advisory:
SYM008-008:
http://securityresponse.symantec.com/avcenter/security/Content/2008.03.10.html