CVE-2009-3110 - Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does

Back Back to CVE browser

MEDIUM

Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does

Published Sep 8, 2009

5.8

MEDIUM

CVSS 2.0

EPSS 1.48%

Description

Race condition in the file transfer functionality in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 allows remote attackers to read sensitive files and prevent client updates by connecting to the file transfer port before the expected client does.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-362

Race Condition

References (4)

http://secunia.com/advisories/36502
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/36113
vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1022779
vdb-entryx_refsource_SECTRACK
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00
x_refsource_CONFIRM

Link	Providers	Tags
http://secunia.com/advisories/36502		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/36113		vdb-entryx_refsource_BID
http://www.securitytracker.com/id?1022779		vdb-entryx_refsource_SECTRACK
http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090826_00		x_refsource_CONFIRM

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 8, 2009

Updated Aug 7, 2024

Reserved Sep 8, 2009

Link CVE-2009-3110

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-3110

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-3110