Description
axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.
References
- http://www.insomniasec.com/advisories/ISVA-080516.2.htm
- 20080518 Insomnia : ISVA-080516.2 - Altiris Deployment Solution - Domain Account Disclosure mailing-list
- ADV-2008-1542 vdb-entry
- SSRT080115 vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-025/
- http://www.symantec.com/avcenter/security/Content/2008.05.14a.html
- 29199 vdb-entry
- symantec-altiris-axengine-info-disclosure(42437) vdb-entry
- 1020024 vdb-entry
- 20080515 ZDI-08-025: Symantec Altiris Deployment Solution Domain Credential Disclosure Vulnerability mailing-list
- 30261 third-party-advisory