CVE-2008-2286

Currently unrated

Key Information:

Vendor
Symantec
Status
Altiris Deployment Solution
Vendor
CVE Published:
18 May 2008

Summary

SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.

References

http://www.securityfocus.com/bid/29198
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/42436
vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2008/1542/references
vdb-entryx_refsource_VUPEN

EPSS Score

82% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.