CVE-2008-2287

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-05-18 · updated 2026-06-16
Weakness: CWE-264

Description

Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.

Affected products

Symantec Altiris Deployment Solution: 6.8, 6.9

References

http://marc.info/?l=bugtraq&m=122167472229965&w=2
http://secunia.com/advisories/30261
http://www.securityfocus.com/bid/29197
http://www.securitytracker.com/id?1020024
http://www.symantec.com/avcenter/security/Content/2008.05.14a.html
http://www.vupen.com/english/advisories/2008/1542/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/42442
http://marc.info/?l=bugtraq&m=122167472229965&w=2
http://secunia.com/advisories/30261
http://www.securityfocus.com/bid/29197
http://www.securitytracker.com/id?1020024
http://www.symantec.com/avcenter/security/Content/2008.05.14a.html

Get alerted when CVE-2008-2287 or the next vulnerability affects your stack