CVE-2008-2291
Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.
axengine.exe en Symantec Altiris Deployment Solution 6.8.x y 6.9.x en versiones anteriores a 6.9.176 genera credenciales con un sal fijado o sin sal, lo que hace que sea más fácil para atacantes remotos adivinar las credenciales de dominio cifradas.
This vulnerability allows attackers to remotely obtain domain credentials on vulnerable installations of Symantec Altiris Deployment Solution. User interaction is not required to exploit this vulnerability. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the axengine.exe service listening by default on TCP port 402. The service allows a remote client to request encrypted domain credentials without authentication. The encryption lacks a salt allowing an attacker with a local installation of Altiris Deployment Solution to easily decrypt the credentials.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2008-05-15 CVE Published
- 2008-05-18 CVE Reserved
- 2024-08-07 CVE Updated
- 2024-10-20 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-255: Credentials Management Errors
CAPEC
References (11)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/30261 | Third Party Advisory | |
| http://www.insomniasec.com/advisories/ISVA-080516.2.htm | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/492128/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/492228/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/29199 | Third Party Advisory | |
| http://www.securitytracker.com/id?1020024 | Third Party Advisory | |
| http://www.vupen.com/english/advisories/2008/1542/references | Third Party Advisory | |
| http://www.zerodayinitiative.com/advisories/ZDI-08-025 | Third Party Advisory |
|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/42437 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.symantec.com/avcenter/security/Content/2008.05.14a.html | 2019-10-09 |
| URL | Date | SRC |
|---|---|---|
| http://marc.info/?l=bugtraq&m=122167472229965&w=2 | 2019-10-09 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Altiris Deployment Solution Search vendor "Symantec" for product "Altiris Deployment Solution" | >= 6.9 < 6.9.176 Search vendor "Symantec" for product "Altiris Deployment Solution" and version " >= 6.9 < 6.9.176" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Altiris Deployment Solution Search vendor "Symantec" for product "Altiris Deployment Solution" | 6.8 Search vendor "Symantec" for product "Altiris Deployment Solution" and version "6.8" | - |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Altiris Deployment Solution Search vendor "Symantec" for product "Altiris Deployment Solution" | 6.8 Search vendor "Symantec" for product "Altiris Deployment Solution" and version "6.8" | sp1 |
Affected
| ||||||
| Symantec Search vendor "Symantec" | Altiris Deployment Solution Search vendor "Symantec" for product "Altiris Deployment Solution" | 6.8 Search vendor "Symantec" for product "Altiris Deployment Solution" and version "6.8" | sp2 |
Affected
| ||||||