Summary
This host is installed with Symantec Altiris Notification Server and is prone to unauthorized access vulnerability.
Impact
Successful exploitation let attackers to access certain encrypted credentials and encryption keys and also execute code, obtain sensitive information, or perform actions with elevated privileges.
Impact Level: Application
Solution
Update to Symantec Altiris Notification Server 6.0 SP3 R12 For updates refer to https://kb.altiris.com/article.asp?article=46763&p=1
Insight
The flaw is due to the application using a static encryption key to encrypt and store certain credentials.
Affected
Symantec Altiris Notification Server versions 6.0.x before 6.0 SP3 R12
References
Severity
Classification
-
CVE CVE-2009-3035 -
CVSS Base Score: 4.3
AV:L/AC:L/Au:S/C:P/I:P/A:P
Related Vulnerabilities
- Adobe Flex SDK 'SWF' Files Cross-Site Scripting Vulnerability (Windows)
- Adobe Digital Edition Information Disclosure Vulnerability (Mac OS X)
- CA Gateway Security Remote Code Execution Vulnerability
- Apple Safari 'Webkit' Information Disclosure Vulnerability (Mac OS X)
- Apache Traffic Server Remote DNS Cache Poisoning Vulnerability