CVE-2009-3109: Critical severity symantec deployment solution vulnerability
Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending "alternate commands" before the handshake is completed.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3109?
CVE-2009-3109 has a high severity rating as it allows attackers to bypass authentication and execute arbitrary commands as SYSTEM.
How do I fix CVE-2009-3109?
To fix CVE-2009-3109, upgrade Symantec Altiris Deployment Solution to version 6.9 SP3 Build 430 or later.
What versions of Symantec Altiris Deployment Solution are affected by CVE-2009-3109?
CVE-2009-3109 affects Symantec Altiris Deployment Solution versions 6.9, 6.9 SP1, and 6.9 SP2.
Can CVE-2009-3109 be exploited remotely?
Yes, CVE-2009-3109 allows remote attackers to exploit the vulnerability.
What authentication method is vulnerable in CVE-2009-3109?
CVE-2009-3109 vulnerability occurs when key-based authentication is used between a deployment server and a client.