Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Symantec Altiris Deployment Solution绕过DBManager认证漏洞
Vulnerability Description
Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Altiris Deployment Solution中DBManager分配了默认的监听端口，授权了网络访问且了解DBManager命令结构的恶意用户可以远程向这个服务发送未经认证的命令。成功利用这个漏洞可能允许能够修改Altiris数据库的攻击者添加或删除用户，以及访问或修改当前所调度的任务。
CVSS Information
N/A
Vulnerability Type
N/A