CVE-2008-2291: Symantec Altiris Deployment Solution

High severity, CVSS 7.5. EPSS: 4.2% chance of exploitation in the next 30 days.

axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.

Affected products

• Symantec Altiris Deployment Solution: from 6.9, before 6.9.176 (fixed in 6.9.176); version 6.8 only

Published 2008-05-18. Last modified 2026-06-16.