CVE-2008-2286 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 32.7% (pctl 98)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows remote attackers to execute arbitrary SQL commands via unspecified string fields in a notification packet.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 32.68% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-05-18 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| symantec | altiris deployment solution |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Symantec Altiris DS - SQL Injection (Metasploit) | 2013-11-13 |
References
- http://marc.info/?l=bugtraq&m=122167472229965&w=2
- http://osvdb.org/show/osvdb/45313
- http://secunia.com/advisories/30261
- http://www.exploit-db.com/exploits/29552
- http://www.securityfocus.com/archive/1/492127/100/0/threaded
- http://www.securityfocus.com/archive/1/492229/100/0/threaded
- http://www.securityfocus.com/bid/29198
- http://www.securitytracker.com/id?1020024
- http://www.symantec.com/avcenter/security/Content/2008.05.14a.html
- http://www.vupen.com/english/advisories/2008/1542/references
- http://www.zerodayinitiative.com/advisories/ZDI-08-024/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42436
- http://marc.info/?l=bugtraq&m=122167472229965&w=2
- http://osvdb.org/show/osvdb/45313
- http://secunia.com/advisories/30261
- http://www.exploit-db.com/exploits/29552
- http://www.securityfocus.com/archive/1/492127/100/0/threaded
- http://www.securityfocus.com/archive/1/492229/100/0/threaded
- http://www.securityfocus.com/bid/29198
- http://www.securitytracker.com/id?1020024
→ the Explorer · watch your stack · NVD