CVE-2008-2286
Symantec Altiris Deployment Solution 6.8.x-6.9.x - SQL Injection via Notification Packet String Fields
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-2286.
PoCs published by Metasploit, Brett Moore, 3v0lver, including Metasploit module exploits/windows/misc/altiris_ds_sqli.
AI-analyzed exploit summary This Metasploit module exploits a SQL injection vulnerability in Symantec Altiris Deployment Solution 6.8 to 6.9.164. It enables xp_cmdshell, retrieves a payload via TFTP, and executes it to achieve remote code execution.
Description
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
Exploits (2)
This Metasploit module exploits a SQL injection vulnerability in Symantec Altiris Deployment Solution 6.8 to 6.9.164. It enables xp_cmdshell, retrieves a payload via TFTP, and executes it to achieve remote code execution.
This Metasploit module exploits a SQL injection vulnerability in Symantec Altiris Deployment Solution 6.8 to 6.9.164 by sending crafted 'UpdateComputer' requests to enable xp_cmdshell, retrieve a payload via TFTP, and execute it for remote code execution.