Description
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
References
- symantec-altiris-install-code-execution(42442) vdb-entry
- ADV-2008-1542 vdb-entry
- SSRT080115 vendor-advisory
- 29197 vdb-entry
- http://www.symantec.com/avcenter/security/Content/2008.05.14a.html
- 1020024 vdb-entry
- 30261 third-party-advisory