NVD

Id
2212  
Name
CVE-2008-2291  
Description
axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-05-18  
Modified Date
2016-11-18  
Seq
2008-2291  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
14050 2212 CVE-2008-2291 SSRT080115  View
14051 2212 CVE-2008-2291 http://www.insomniasec.com/advisories/ISVA-080516.2.htm  View
14052 2212 CVE-2008-2291 20080515 ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability  View
14053 2212 CVE-2008-2291 20080518 Insomnia : ISVA-080516.2 - Altiris Deployment Solution - Domain Account Disclosure  View
14054 2212 CVE-2008-2291 29199  View
14055 2212 CVE-2008-2291 1020024  View
14056 2212 CVE-2008-2291 http://www.symantec.com/avcenter/security/Content/2008.05.14a.html  View
14057 2212 CVE-2008-2291 ADV-2008-1542  View
14058 2212 CVE-2008-2291 http://www.zerodayinitiative.com/advisories/ZDI-08-025/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50493 JVNDB-2008-005803 Symantec Altiris Deployment Solution の axengine.exe における暗号化されたドメイン資格情報を推測される脆弱性 Symantec Altiris Deployment Solution の axengine.exe は、固定化された salt、または salt 無しで、資格情報を生成するため、暗号化されたドメイン資格情報を推測される脆弱性が存在します。 CVE-2008-2291 32404 CVE-2008-2291 2212 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005803.html 2008-05-14 2012-12-20 View