CVE-2008-6828

· HIGHModified

← All CVEs

CVSS v3.1

7.8

EPSS

0.25%

Published

Jun 8, 2009

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-312

Affected Products (2)

symantec · altiris_deployment_solution (up to 6.9.355)vulnerable

symantec · altiris_deployment_solutionvulnerable

References (12)

http://secunia.com/advisories/31773

Broken LinkVendor Advisory

http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html

Broken LinkPatchVendor Advisory

http://www.securityfocus.com/bid/31767

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1021072

Broken LinkThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/2876

Broken LinkPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46007

Third Party AdvisoryVDB Entry

http://secunia.com/advisories/31773

Broken LinkVendor Advisory

http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html

Broken LinkPatchVendor Advisory

http://www.securityfocus.com/bid/31767

Broken LinkThird Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1021072

Broken LinkThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/2876

Broken LinkPatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46007

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs