Published: 03/11/2009 Updated: 10/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Subscribe to Altiris Deployment Solution

Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server (NS) 6.0 before R12, Deployment Server 6.8 and 6.9 in Symantec Altiris Deployment Solution 6.9 SP3, and Symantec Management Platform (SMP) 7.0 before SP3 allows remote malicious users to execute arbitrary code via a long string in the second argument.

Vulnerable Product	Search on Vulmon	Subscribe to Product
symantec altiris deployment solution 6.9
symantec altiris notification server 6.0
symantec altiris notification server 7.0
symantec altiris management platform 7.0

## # $Id: symantec_consoleutilities_browseandsavefilerb 10998 2010-11-11 22:43:22Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ # ...

## # Use it only for education or ethical pentesting! The author accepts no liability for damage caused by this tool ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote include Msf::Exploit::Remote::HttpServer::HTML def initialize(info = {}) super(update_info(info, 'Name' ...

CWE-119 https://kb.altiris.com/article.asp?article=49568&p=1 http://www.securityfocus.com/bid/36698 http://sotiriu.de/adv/NSOADV-2009-001.txt https://kb.altiris.com/article.asp?article=49389&p=1 http://www.vupen.com/english/advisories/2009/3117 http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20091102_00 http://www.securityfocus.com/archive/1/507625/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/16613/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-3031

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect