Symantec Altiris Notification Server vulnerabilities

6 CVEs affecting Symantec Altiris Notification Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-3028, published 2011-03-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2009-3031, published 2009-11-03. High severity, CVSS 9.3. EPSS: 45.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control 6.0.0.1846 in AeXNSConsoleUtilities.dll in Symantec Altiris Notification Server…
CVE-2009-3028, published 2011-03-07. Medium severity, CVSS 6.8. EPSS: 42.6% chance of exploitation in the next 30 days. The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x…
CVE-2009-3033, published 2009-11-25. High severity, CVSS 9.3. EPSS: 40% chance of exploitation in the next 30 days. Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in AeXNSConsoleUtilities.dll in the web console in Symantec Altiris Deployment Solution 6.9.x, Altiris…
CVE-2009-3035, published 2010-02-02. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credentials and certain discovery credentials, and stores this key on…
CVE-2008-2794, published 2008-06-20. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors.
CVE-2008-0716, published 2008-02-12. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatter" style attack.