CVE-2008-2291

Symantec Altiris Deployment Solution 6.8.x and 6.9.x < 6.9.176 - Weak Credential Generation via Fixed Salt

Title source: llm

Description

axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.

References (11)

Core 11

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/42437

Third Party Advisory x_refsource_misc

http://www.insomniasec.com/advisories/ISVA-080516.2.htm

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/492228/100/0/threaded

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2008/1542/references

Mailing List, Third Party Advisory vendor-advisory x_refsource_hp

http://marc.info/?l=bugtraq&m=122167472229965&w=2

Third Party Advisory, VDB Entry x_refsource_misc

http://www.zerodayinitiative.com/advisories/ZDI-08-025/

Patch, Vendor Advisory x_refsource_confirm

http://www.symantec.com/avcenter/security/Content/2008.05.14a.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/29199

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1020024

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/492128/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/30261

Scores

EPSS 0.0217

EPSS Percentile 84.5%

Details

CWE

CWE-255

Status published

Products (2)

symantec/altiris_deployment_solution 6.8 (3 CPE variants)

symantec/altiris_deployment_solution 6.9 - 6.9.176

Published May 18, 2008

Tracked Since Feb 18, 2026