Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430, when key-based authentication is being used between a deployment server and a client, allows remote attackers to bypass authentication and execute arbitrary commands as SYSTEM by spoofing the deployment server and sending "alternate commands" before the handshake is completed.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2009-09-08T23:00:00
Updated: 2013-02-07T10:00:00
Reserved: 2009-09-08T00:00:00
Link: CVE-2009-3109
JSON object: View
NVD Information
Status : Modified
Published: 2009-09-08T23:30:00.627
Modified: 2013-02-07T04:21:39.547
Link: CVE-2009-3109
JSON object: View
Redhat Information
No data.
CWE