CVE

Id
40544  
CVE No.
CVE-2009-3109  
Status
Candidate  
Description
Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending "alternate commands" before the handshake is completed.  
Phase
Assigned (20090908)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
445389 40544 CVE-2009-3109 CONFIRM:http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00  View
445390 40544 CVE-2009-3109 BID:36112  View
445391 40544 CVE-2009-3109 URL:http://www.securityfocus.com/bid/36112  View
445392 40544 CVE-2009-3109 SECTRACK:1022779  View
445393 40544 CVE-2009-3109 URL:http://www.securitytracker.com/id?1022779  View
445394 40544 CVE-2009-3109 SECUNIA:36502  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43917 JVNDB-2009-004924 OXID eShop Professional などの製品における製品レビューへの書き込みアクセス権を取得される脆弱性 OXID eShop Professional、Enterprise、および Community Edition には、製品レビューへの書き込みアクセス権を取得される脆弱性が存在します。 CVE-2009-3113 40544 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004924.html  View