CVE-2008-6828

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-06-08 · updated 2026-06-16
Weakness: CWE-312

Description

Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 stores the Application Identity Account password in memory in cleartext, which allows local users to gain privileges and modify clients of the Deployment Solution Server.

Affected products

Symantec Altiris Deployment Solution: before 6.9.355; 6.9.355 — fixed in 6.9.355

How to fix

Upgrade to a fixed version: Symantec Altiris Deployment Solution 6.9.355. Check the vendor advisory for mitigations.

References

http://secunia.com/advisories/31773
http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html
http://www.securityfocus.com/bid/31767
http://www.securitytracker.com/id?1021072
http://www.vupen.com/english/advisories/2008/2876
https://exchange.xforce.ibmcloud.com/vulnerabilities/46007
http://secunia.com/advisories/31773
http://securityresponse.symantec.com/avcenter/security/Content/2008.10.20b.html
http://www.securityfocus.com/bid/31767
http://www.securitytracker.com/id?1021072
http://www.vupen.com/english/advisories/2008/2876
https://exchange.xforce.ibmcloud.com/vulnerabilities/46007

Get alerted when CVE-2008-6828 or the next vulnerability affects your stack