CVE-2009-3033: Buffer Overflow
Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris Notification Server 6.0.x, and Management Platform 7.0.x allows remote attackers to execute arbitrary code via a long string in the second argument.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3033?
CVE-2009-3033 is classified as a critical vulnerability that allows remote code execution via a buffer overflow.
How do I fix CVE-2009-3033?
To fix CVE-2009-3033, upgrade to the latest version of Symantec Altiris products that are not vulnerable.
What products are affected by CVE-2009-3033?
CVE-2009-3033 affects Symantec Altiris Notification Server versions 6.0.x, Altiris Deployment Solution 6.9.x, and Management Platform 7.0.x.
Can CVE-2009-3033 be exploited remotely?
Yes, CVE-2009-3033 can be exploited remotely by an attacker to execute arbitrary code.
What is the impact of CVE-2009-3033?
The impact of CVE-2009-3033 includes potential unauthorized access and control over affected systems.