← back
CVE-2008-2286

CVE-2008-2286

EPSS 32.7%
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/29552unverifiedexploitdbwww.exploit-db.com/exploits/29552unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=122167472229965&w=2http://osvdb.org/show/osvdb/45313http://secunia.com/advisories/30261https://exchange.xforce.ibmcloud.com/vulnerabilities/42436http://www.exploit-db.com/exploits/29552http://www.securityfocus.com/archive/1/492127/100/0/threadedhttp://www.securityfocus.com/archive/1/492229/100/0/threadedhttp://www.securityfocus.com/bid/29198http://www.securitytracker.com/id?1020024http://www.symantec.com/avcenter/security/Content/2008.05.14a.htmlhttp://www.vupen.com/english/advisories/2008/1542/referenceshttp://www.zerodayinitiative.com/advisories/ZDI-08-024/