CVE-2008-1754
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka...
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
Exploit likelihood
What each source reports
NVD Score used
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
- Record
CVE-2008-1754- CVSS 2.0
- 1.7 Low
AV:L/AC:L/Au:S/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
- Record
CVE-2008-1754- Updated
- 2026-11-02
EUVDEUVD-2008-1754 No score
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
- Record
EUVD-2008-1754- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8j7c-jhc4-6fcv No score
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka...
Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.
- Record
GHSA-8j7c-jhc4-6fcv- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-1754 is a low vulnerability (CVSS 1.7) in Symantec Altiris Deployment Solution, published April 11, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 23rd percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/41771
securityfocus.com/bid/28707
vupen.com/english/advisories/2008/1197/references
secunia.com/advisories/29771
securityresponse.symantec.com/avcenter/security/Content/2008.04.10.html
securitytracker.com/id?1019825
osvdb.org/44388
nvd.nist.gov/vuln/detail/CVE-2008-1754
github.com/advisories/GHSA-8j7c-jhc4-6fcv