Vulnerability in Symantec Altiris Deployment Solution
CVE-2009-3110
Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.
Vulnerability class: Race Condition
EPSS: 0.015 (71.2th percentile) — read the EPSS interpretation.
Affected products
- Symantec Altiris_deployment_solution — versions 6.9, 6.9.164, 6.9.176
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)