FYI...
- http://securityresponse.symantec.com/avcenter/security/Content/2008.06.17.html
June 17, 2008
Symantec Altiris Notification Server Agent GUI Local Elevation of Privilege
Severity: Medium
Remote Access: No
Local Access: Yes
Authentication Required: Yes
Exploit publicly available: No
Overview: A non-privileged user can leverage the Symantec Altiris Notification Server Agent Graphical User Interface (GUI) to gain privileged access to the system...
The update to resolve this issue can be obtained as follows:
1. Go to http://kb.altiris.com/
2. Search for KB 39159.
3. Select KB link and follow the directions to download SP3 R8.
4. After downloading the file, execute and follow the installer instructions to upgrade Notification Server.,,
- http://secunia.com/advisories/30741/
Release Date: 2008-06-18
Critical: Less critical
Impact: Privilege escalation
Where: Local system
Solution Status: Vendor Patch
Software: Altiris Agent 6.x, Altiris Notification Server 6.x ...
Solution: Update to 6.0 SP3 R8 (KB 39159).
http://kb.altiris.com/ ...
 _________________ AplusWebMaster
~ Are you up to date or vulnerable to Hackers? ...or both?
.
|