CVE-2008-1754

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
1.7 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:S/C:P/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 25%
VendorProductVersion
symantecaltiris_deployment_solution
𝑥
≤ 6.8
symantecaltiris_deployment_solution
6.8:sp1
symantecaltiris_deployment_solution
6.8.380
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/29771
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
http://www.osvdb.org/44388
http://www.securityfocus.com/bid/28707
http://www.securitytracker.com/id?1019825
http://www.vupen.com/english/advisories/2008/1197/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41771
http://secunia.com/advisories/29771
http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
http://www.osvdb.org/44388
http://www.securityfocus.com/bid/28707
http://www.securitytracker.com/id?1019825
http://www.vupen.com/english/advisories/2008/1197/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41771