PT-2009-2296
CVE-2008-6827
·
تاريخ النشر
2009-06-08
·
تاريخ التحديث
2024-02-14
الوصف من
CVSS 2.0
6.8
متوسطةالمقاييسAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions:
Symantec Altiris Deployment Solution versions prior to 6.9.355 SP1
Description:
The issue allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack. This attack targets the
CommandLine parameter to cmd.exe to use SYSTEM privileges and modifies the DLL loaded using the LoadLibrary API function.Recommendations:
For Symantec Altiris Deployment Solution versions prior to 6.9.355 SP1, update to version 6.9.355 SP1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾