CVE-2008-2288: Low severity symantec deployment solution vulnerability

Published May 18, 2008

Updated

Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.

Affected Software

2 affected components

Symantec Altiris Deployment Solution=6.9

Symantec Altiris Deployment Solution=6.8

Remediation

Patch Available

http://www.symantec.com/avcenter/security/Content/2008.05.14a.html

Event History

May 18, 2008

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2288?

CVE-2008-2288 is considered to be a moderate severity vulnerability due to its potential for causing denial of service and exposing sensitive information.

How do I fix CVE-2008-2288?

To fix CVE-2008-2288, it is recommended to upgrade to Symantec Altiris Deployment Solution version 6.9.176 or later.

What are the effects of CVE-2008-2288?

The effects of CVE-2008-2288 include the inability to control access to registry keys, which can lead to a denial of service and data exposure.

Who is affected by CVE-2008-2288?

CVE-2008-2288 affects local users of Symantec Altiris Deployment Solution versions 6.8.x and 6.9.x before 6.9.176.

Is there a workaround for CVE-2008-2288?

Currently, there are no specific workarounds for CVE-2008-2288; users should install the patch or upgrade the software.