CVE-2009-3107

Severity: medium (CVSS 4.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-09-08 · updated 2026-06-16
Weakness: CWE-287

Description

Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.

Affected products

Symantec Altiris Deployment Solution: 6.9, 6.9-sp1, 6.9-sp2

References

http://secunia.com/advisories/36502
http://www.securityfocus.com/bid/36110
http://www.securitytracker.com/id?1022779
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00
http://secunia.com/advisories/36502
http://www.securityfocus.com/bid/36110
http://www.securitytracker.com/id?1022779
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00

Get alerted when CVE-2009-3107 or the next vulnerability affects your stack