CVE-2009-3028
Symantec Altiris Deployment Solution/Notification Server - RCE via AeXNSPkgDLLib.dll
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3028.
PoCs published by Metasploit, MC, including Metasploit module exploits/windows/browser/symantec_altirisdeployment_downloadandinstall.
AI-analyzed exploit summary This Metasploit module exploits CVE-2009-3028 in Symantec Altiris Deployment Solution by leveraging an ActiveX control to download and execute arbitrary files. It uses the `DownloadAndInstall` method in `AeXNSPkgDLLib.dll` to achieve remote code execution.
Description
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.
Exploits (2)
This Metasploit module exploits CVE-2009-3028 in Symantec Altiris Deployment Solution by leveraging an ActiveX control to download and execute arbitrary files. It uses the `DownloadAndInstall` method in `AeXNSPkgDLLib.dll` to achieve remote code execution.
This Metasploit module exploits CVE-2009-3028 by leveraging an unsafe ActiveX control (AeXNSPkgDLLib.dll) in Symantec Altiris Deployment Solution to download and execute arbitrary files. It hosts a malicious payload and tricks the victim into visiting a crafted HTML page that triggers the vulnerability.