CVE-2008-1754

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.

Score

CVSS 2.0 1.7 Low

Status

Modified - cve@mitre.org

Published

2008-04-11

Last modified

2024-08-07

Weaknesses

CWE-310

Affected products

• Altiris Deployment Solution (Symantec)

References

• http://secunia.com/advisories/29771
• http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
• http://www.osvdb.org/44388
• http://www.securityfocus.com/bid/28707
• http://www.securitytracker.com/id?1019825
• http://www.vupen.com/english/advisories/2008/1197/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41771