CVE-2009-3107
Symantec Altiris Deployment Solution - Authentication Bypass
Title source: ruleDescription
Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.
References (4)
Scores
EPSS
0.0051
EPSS Percentile
66.1%
Classification
CWE
CWE-287
Status
draft
Affected Products (3)
symantec/altiris_deployment_solution
symantec/altiris_deployment_solution
symantec/altiris_deployment_solution
Timeline
Published
Sep 08, 2009
Tracked Since
Feb 18, 2026