CVE-2008-2291: symantec altiris_deployment_solution Credentials Management Errors

EPSS trend

Probability

4.19%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.19% on 18-09-2026

18-09-202618-10-2026

EPSS score

4.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

11 links

www.insomniasec.com/advisories/ISVA-080516.2.htmX Refsource MISCThird Party Advisory
www.securityfocus.com/archive/1/492228/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
www.vupen.com/english/advisories/2008/1542/referencesVDB EntryX Refsource VUPENThird Party Advisory
marc.info?l=bugtraq&m=122167472229965&w=2Vendor AdvisoryX Refsource HPMailing ListThird Party Advisory
www.zerodayinitiative.com/advisories/ZDI-08-025/X Refsource MISCThird Party AdvisoryVDB Entry
www.symantec.com/avcenter/security/Content/2008.05.14a.htmlX Refsource CONFIRMPatchVendor Advisory
www.securityfocus.com/bid/29199VDB EntryX Refsource BIDThird Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/42437VDB EntryX Refsource XFThird Party Advisory
www.securitytracker.com/id?1020024VDB EntryX Refsource SECTRACKThird Party Advisory
www.securityfocus.com/archive/1/492128/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry

Show all 11 references

secunia.com/advisories/30261Third Party AdvisoryX Refsource SECUNIA

Related vulnerabilities

CVE-2007-4380symantecaltiris_deployment_solution0.35%19y ago16-08-2007 18:00Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privileges via the Log File Viewer.CVE-2007-5838symantecaltiris_deployment_solution0.39%18y ago06-11-2007 19:00Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key-based authentication to Deployment server" browser option, a different issue than CVE-2007-4380.CVE-2007-5555symantecaltiris_deployment_solution0.33%19y ago18-10-2007 20:00Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, aka "Authentication Credentials Information Leakage in Altiris Deployment Solution." NOTE: this description is based on a vague pre-advisory with no actionable information. However, since it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.CVE-2008-2286symantecaltiris_deployment_solution32.68%18y ago18-05-2008 14:00SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.CVE-2008-2287symantecaltiris_deployment_solution0.35%18y ago18-05-2008 14:00Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.CVE-2008-2288symantecaltiris_deployment_solution0.34%18y ago18-05-2008 14:00Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.

All vulnerabilities inaltiris_deployment_solution

CVE-2008-2291: symantec altiris_deployment_solution Credentials Management Errors

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References