Description
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.
References
- symantec-altiris-keys-data-manipulation(42441) vdb-entry
- ADV-2008-1542 vdb-entry
- SSRT080115 vendor-advisory
- 29196 vdb-entry
- http://www.symantec.com/avcenter/security/Content/2008.05.14a.html
- 1020024 vdb-entry
- 30261 third-party-advisory