Vulnonym.org

CVE-2008-1754 - Unbearable Itinerary

Description

Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory which allows local users to obtain sensitive information by dumping the AClient.exe process memory.

Reference

http://securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html http://www.securityfocus.com/bid/28707 http://www.securitytracker.com/id?1019825 http://secunia.com/advisories/29771 http://www.osvdb.org/44388 http://www.vupen.com/english/advisories/2008/1197/references https://exchange.xforce.ibmcloud.com/vulnerabilities/41771