Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-6827

EPSS 1.56% · P82
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-6827

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack on the "command prompt" hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Symantec Altiris Deployment Solution客户端GUI本地权限提升漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Altiris客户端GUI的主窗口有一个隐藏按键，该按键的标题为"命令提示符"。点击这个按键会导致GUI试图用以下命令行参数调用CreateProcess()： c:\Program Files\Altiris\AClient\cmd.exe 客户端GUI还有一个ListView控件，可用于覆盖进程内存。本地攻击者可以使用ListView覆盖静态指针，
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-6827

#POC DescriptionSource LinkShenlong Link
1Symantec Altiris Client Service 6.8.378 - Local Privilege Escalationhttps://github.com/alt3kx/CVE-2008-6827POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-6827

请登录查看更多情报信息。

Same Patch Batch · n/a · 2009-06-08 · 15 CVEs total

CVE-2008-6826MHF Media Pro 'dhtml.pl'远程指令执行漏洞
CVE-2008-6828Symantec Altiris Deployment Solution "cleartext" 加密问题漏洞
CVE-2008-6829VicFTPS 命令'LIST'　远程拒绝服务漏洞
CVE-2008-6830Citrix Web Interface 断开功能权限管理和访问控制漏洞
CVE-2008-6831Atlassian JIRA 多个跨站脚本攻击漏洞
CVE-2008-6832Atlassian JIRA 跨站脚本攻击漏洞
CVE-2009-2003Ascad Networks Cookie权限绕过漏洞
CVE-2009-2004Dokeos 多个远程输入验证漏洞
CVE-2009-2005Dokeos 多个远程输入验证漏洞
CVE-2009-2006Dokeos 多个远程输入验证和跨站脚本攻击漏洞
CVE-2009-2007Dokeos 多个目录遍历漏洞
CVE-2009-2008Dokeos 多个SQL注入漏洞
CVE-2009-2009Dokeos 多个远程输入验证和跨站脚本攻击漏洞
CVE-2009-2010Haudenschilt Family Connections CMS 多个SQL注入漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-6827

No comments yet

Leave a comment