CVE-2007-3874: Altiris Deployment Solution

High severity, CVSS 7.8. EPSS: 2.2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component (pxemtftp.exe) in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows remote attackers to read arbitrary files via unspecified vectors.

Affected products

• Altiris Deployment Solution: version 6.0 only; version 6.8 only

Published 2007-11-06. Last modified 2026-06-16.