CVE-2008-2286

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

32.68%

Published

May 18, 2008

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBSymantec Altiris DS - SQL Injection (Metasploit)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

Weaknesses (CWE)

CWE-89

Affected Products (2)

symantec · altiris_deployment_solutionvulnerable

References (20)

http://marc.info/?l=bugtraq&m=122167472229965&w=2

http://osvdb.org/show/osvdb/45313

http://secunia.com/advisories/30261

Vendor Advisory

http://www.exploit-db.com/exploits/29552

http://www.securityfocus.com/archive/1/492127/100/0/threaded

http://www.securityfocus.com/archive/1/492229/100/0/threaded

http://www.securityfocus.com/bid/29198

http://www.securitytracker.com/id?1020024

http://www.symantec.com/avcenter/security/Content/2008.05.14a.html

PatchVendor Advisory

http://www.vupen.com/english/advisories/2008/1542/references

Vendor Advisory

http://www.zerodayinitiative.com/advisories/ZDI-08-024/

https://exchange.xforce.ibmcloud.com/vulnerabilities/42436

http://marc.info/?l=bugtraq&m=122167472229965&w=2

http://osvdb.org/show/osvdb/45313

http://secunia.com/advisories/30261

Vendor Advisory

http://www.exploit-db.com/exploits/29552

http://www.securityfocus.com/archive/1/492127/100/0/threaded

http://www.securityfocus.com/archive/1/492229/100/0/threaded

http://www.securityfocus.com/bid/29198

http://www.securitytracker.com/id?1020024

KEV Catalog EPSS Scores Vendors All CVEs