Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 01:06
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://osvdb.org/60496 - | |
| References | () http://www.securityfocus.com/bid/37092 - Exploit, Patch | |
| References | () http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091124_00 - | |
| References | () http://www.vupen.com/english/advisories/2009/3328 - Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/54415 - | |
| References | () https://kb.altiris.com/article.asp?article=50072&p=1 - | |
| References | () https://kb.altiris.com/article.asp?article=50279&p=1 - Patch, Vendor Advisory |
Information
Published : 2009-11-25 16:30
Updated : 2024-11-21 01:06
NVD link : CVE-2009-3033
Mitre link : CVE-2009-3033
CVE.ORG link : CVE-2009-3033
JSON object : View
Products Affected
symantec
- altiris_notification_server
- altiris_management_platform
- altiris_deployment_solution
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer