CVE-2009-3107
Severity
4.8MEDIUM
EPSS
0.5%
top 33.54%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedSep 8
Latest updateMay 2
Description
Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.
CVSS vector
AV:A/AC:L/C:P/I:P/A:NExploitability: 6.5 | Impact: 4.9