Test ID:	1.3.6.1.4.1.25623.1.0.800985
Category:	General
Title:	Symantec Altiris NS Key Unauthorized Access Vulnerability
Summary:	Symantec Altiris Notification Server is prone to unauthorized access vulnerability.
Description:	Summary: Symantec Altiris Notification Server is prone to unauthorized access vulnerability. Vulnerability Insight: The flaw is due to the application using a static encryption key to encrypt and store certain credentials. Vulnerability Impact: Successful exploitation let attackers to access certain encrypted credentials and encryption keys and also execute code, obtain sensitive information, or perform actions with elevated privileges. Affected Software/OS: Symantec Altiris Notification Server versions 6.0.x before 6.0 SP3 R12. Solution: Update to Symantec Altiris Notification Server 6.0 SP3 R12. CVSS Score: 4.3 CVSS Vector: AV:L/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3035 BugTraq ID: 37953 http://www.securityfocus.com/bid/37953 http://osvdb.org/62010 http://www.securitytracker.com/id?1023521 http://secunia.com/advisories/38356 http://www.vupen.com/english/advisories/2010/0256 XForce ISS Database: symantec-ans-key-unauth-access(55952) https://exchange.xforce.ibmcloud.com/vulnerabilities/55952
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.