CVE-2008-6827

Name of the Vulnerable Software and Affected Versions: Symantec Altiris Deployment Solution versions prior to 6.9.355 SP1

Description: The issue allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack. This attack targets the CommandLine parameter to cmd.exe to use SYSTEM privileges and modifies the DLL loaded using the LoadLibrary API function.

Recommendations: For Symantec Altiris Deployment Solution versions prior to 6.9.355 SP1, update to version 6.9.355 SP1 or later to resolve the issue.