CVE-2009-3035

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-02-02 · updated 2026-06-16
Weakness: CWE-255

Description

The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credentials and certain discovery credentials, and stores this key on the Notification Server machine, which allows local users to obtain sensitive information and possibly execute arbitrary code by decrypting and using these credentials.

Affected products

Symantec Altiris Notification Server: 6.0, 6.0-sp1, 6.0-sp2, 6.0-sp3, 6.0-sp3_r7, 6.0-sp3_r8

References

http://osvdb.org/62010
http://secunia.com/advisories/38356
http://www.securityfocus.com/bid/37953
http://www.securitytracker.com/id?1023521
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100128_00
http://www.vupen.com/english/advisories/2010/0256
https://exchange.xforce.ibmcloud.com/vulnerabilities/55952
http://osvdb.org/62010
http://secunia.com/advisories/38356
http://www.securityfocus.com/bid/37953
http://www.securitytracker.com/id?1023521
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100128_00

Get alerted when CVE-2009-3035 or the next vulnerability affects your stack