CVE-2008-6827

HIGH

Symantec Altiris Deployment Solution 6.0-6.9.355 - Local Privilege Escalation via Shatter Attack on AClient.exe

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-6827. PoCs published by alt3kx.

AI-analyzed exploit summary The repository contains only a README with minimal information about CVE-2008-6827, referencing an Exploit-DB entry but lacking any actual exploit code or technical details.

Description

The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack on the "command prompt" hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function.

Exploits (1)

nomisec STUB

by alt3kx · poc

https://github.com/alt3kx/CVE-2008-6827

View Code ZIP pw:eip

The repository contains only a README with minimal information about CVE-2008-6827, referencing an Exploit-DB entry but lacking any actual exploit code or technical details.

Classification

Stub 90%

Attack Type

Lpe

Complexity

Theoretical

Reliability

Theoretical

Target: Symantec Altiris Client Service 6.8.378

No auth needed

devstral-2 · analyzed Feb 19, 2026 Full analysis →