CVE-2009-3110: symantec altiris_deployment_solution Race Condition

Vulnerability summary

CVE-2009-3110 is a medium (CVSS 5.8) Race Condition vulnerability in symantec altiris_deployment_solution. EPSS estimates a 1.48% chance of exploitation in the next 30 days, higher than 73.4% of scored vulnerabilities.

Timeline

1. 08-09-2009
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.

• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.