CVE-2008-2288 - Vulnerability Details - OpenCVE

Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Local

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Symantec	Altiris Deployment Solution

Configuration 1 [-]

OR	cpe:2.3:a:symantec:altiris_deployment_solution:6.8:::::::*
	cpe:2.3:a:symantec:altiris_deployment_solution:6.9:::::::*

No data.

References

Link	Providers
http://marc.info/?l=bugtraq&m=122167472229965&w=2
http://secunia.com/advisories/30261
http://www.securityfocus.com/bid/29196
http://www.securitytracker.com/id?1020024
http://www.symantec.com/avcenter/security/Content/2008.05.14a.html
http://www.vupen.com/english/advisories/2008/1542/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42441

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-05-18T14:00:00

Updated: 2024-08-07T08:58:01.493Z

Reserved: 2008-05-18T00:00:00

Link: CVE-2008-2288

Vulnrichment

No data.

NVD

Status : Modified

Published: 2008-05-18T14:20:00.000

Modified: 2024-11-21T00:46:31.470

Link: CVE-2008-2288

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-05-14T00:00:00", "descriptions": [{"lang": "en", "value": "Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-08-07T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "symantec-altiris-keys-data-manipulation(42441)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42441"}, {"name": "ADV-2008-1542", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2008/1542/references"}, {"name": "SSRT080115", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"name": "HPSBMA02369", "tags": ["vendor-advisory", "x_refsource_HP"], "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"name": "29196", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/29196"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.symantec.com/avcenter/security/Content/2008.05.14a.html"}, {"name": "1020024", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1020024"}, {"name": "30261", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/30261"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-2288", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "symantec-altiris-keys-data-manipulation(42441)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42441"}, {"name": "ADV-2008-1542", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2008/1542/references"}, {"name": "SSRT080115", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"name": "HPSBMA02369", "refsource": "HP", "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"name": "29196", "refsource": "BID", "url": "http://www.securityfocus.com/bid/29196"}, {"name": "http://www.symantec.com/avcenter/security/Content/2008.05.14a.html", "refsource": "CONFIRM", "url": "http://www.symantec.com/avcenter/security/Content/2008.05.14a.html"}, {"name": "1020024", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1020024"}, {"name": "30261", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/30261"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T08:58:01.493Z"}, "title": "CVE Program Container", "references": [{"name": "symantec-altiris-keys-data-manipulation(42441)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42441"}, {"name": "ADV-2008-1542", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2008/1542/references"}, {"name": "SSRT080115", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"name": "HPSBMA02369", "tags": ["vendor-advisory", "x_refsource_HP", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"name": "29196", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/29196"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.symantec.com/avcenter/security/Content/2008.05.14a.html"}, {"name": "1020024", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1020024"}, {"name": "30261", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/30261"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-2288", "datePublished": "2008-05-18T14:00:00", "dateReserved": "2008-05-18T00:00:00", "dateUpdated": "2024-08-07T08:58:01.493Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:symantec:altiris_deployment_solution:6.8:*:*:*:*:*:*:*", "matchCriteriaId": "6F838B26-BCE1-4663-95B1-B40BAB4F614E", "vulnerable": true}, {"criteria": "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*", "matchCriteriaId": "F0002047-0965-4086-A5E6-AEC02200B6CF", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information."}, {"lang": "es", "value": "Symantec Altiris Deployment Solution 6.8.x y 6.9.x anterior a 6.9.176 no tiene suficiente control de acceso para eliminaci\u00f3n y modificaci\u00f3n de claves de registro, que permite a usuarios locales provocar una denegaci\u00f3n de servicio u obtener informaci\u00f3n sensible."}], "id": "CVE-2008-2288", "lastModified": "2024-11-21T00:46:31.470", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 3.6, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-05-18T14:20:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/30261"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/29196"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1020024"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.symantec.com/avcenter/security/Content/2008.05.14a.html"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2008/1542/references"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42441"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=122167472229965&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/30261"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/29196"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1020024"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.symantec.com/avcenter/security/Content/2008.05.14a.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2008/1542/references"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/42441"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-264"}], "source": "nvd@nist.gov", "type": "Primary"}]}