CVE-2008-2287
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the...
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
Exploit likelihood
What each source reports
NVD Score used
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
- Record
CVE-2008-2287- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
- Record
CVE-2008-2287- Updated
- 2026-11-02
EUVDEUVD-2008-2284 No score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
- Record
EUVD-2008-2284- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xpjc-cq5g-ggfp No score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the...
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
- Record
GHSA-xpjc-cq5g-ggfp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2287 is a high vulnerability (CVSS 7.2) in Symantec Altiris Deployment Solution, published May 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 28th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/42442
vupen.com/english/advisories/2008/1542/references
marc.info?l=bugtraq&m=122167472229965&w=2
securityfocus.com/bid/29197
symantec.com/avcenter/security/Content/2008.05.14a.html
securitytracker.com/id?1020024
secunia.com/advisories/30261
nvd.nist.gov/vuln/detail/CVE-2008-2287
github.com/advisories/GHSA-xpjc-cq5g-ggfp