Privilege Escalation in Symantec Altiris Deployment Solution 6.x

CVE-2008-6827

Summary

The ListView control in the Client GUI (AClient.exe) of Symantec Altiris Deployment Solution versions prior to 6.9.355 SP1 is susceptible to a privilege escalation vulnerability. Local attackers can exploit this weakness by executing a 'Shatter' style attack on a hidden GUI button tied to the command prompt. This exploitation enables the attacker to overwrite the CommandLine parameter to gain SYSTEM privileges and manipulate the DLLs loaded into the application via the LoadLibrary API, allowing for arbitrary command execution with elevated permissions.

References