CVE-2009-3033 | BDVDB-2026-39377 Detail
Description#
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securityfocus.com/bid/37092
- http://www.vupen.com/english/advisories/2009/3328
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54415
- https://kb.altiris.com/article.asp?article=50072&p=1
- https://kb.altiris.com/article.asp?article=50279&p=1
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091124_00
- http://osvdb.org/60496
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.