CVE

Id
40466  
CVE No.
CVE-2009-3031  
Status
Candidate  
Description
Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote attackers to execute arbitrary code via a long string in the second argument.  
Phase
Assigned (20090831)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
444581 40466 CVE-2009-3031 BUGTRAQ:20091102 NSOADV-2009-001: Symantec ConsoleUtilities ActiveX Control Buffer Overflow  View
444582 40466 CVE-2009-3031 URL:http://www.securityfocus.com/archive/1/archive/1/507625/100/0/threaded  View
444583 40466 CVE-2009-3031 MISC:http://sotiriu.de/adv/NSOADV-2009-001.txt  View
444584 40466 CVE-2009-3031 CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00  View
444585 40466 CVE-2009-3031 CONFIRM:https://kb.altiris.com/article.asp?article=49389&p=1  View
444586 40466 CVE-2009-3031 CONFIRM:https://kb.altiris.com/article.asp?article=49568&p=1  View
444587 40466 CVE-2009-3031 BID:36698  View
444588 40466 CVE-2009-3031 URL:http://www.securityfocus.com/bid/36698  View
444589 40466 CVE-2009-3031 VUPEN:ADV-2009-3117  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39246 JVNDB-2010-005031 Symantec Altiris Notification Server の Web コンソールにおける重要な情報を取得される脆弱性 Symantec Altiris Notification Server の Web コンソールは、SQL Server 資格情報および特定のディスカバリ資格情報を複合可能なハードコードされた鍵を使用するため、重要な情報を取得される、および任意のコードを実行される脆弱性が存在します。 CVE-2009-3035 40466 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005031.html  View