CVE-2008-2288
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access...
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.
Exploit likelihood
What each source reports
NVD Score used
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.
- Record
CVE-2008-2288- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:N/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.
- Record
CVE-2008-2288- Updated
- 2026-11-02
EUVDEUVD-2008-2285 No score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.
- Record
EUVD-2008-2285- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-4fp5-977c-5g2w No score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access...
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 has insufficient access control for deletion and modification of registry keys, which allows local users to cause a denial of service or obtain sensitive information.
- Record
GHSA-4fp5-977c-5g2w- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2288 is a low vulnerability (CVSS 3.6) in Symantec Altiris Deployment Solution, published May 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.34%, the 27th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/42441
vupen.com/english/advisories/2008/1542/references
marc.info?l=bugtraq&m=122167472229965&w=2
securityfocus.com/bid/29196
symantec.com/avcenter/security/Content/2008.05.14a.html
securitytracker.com/id?1020024
secunia.com/advisories/30261
nvd.nist.gov/vuln/detail/CVE-2008-2288
github.com/advisories/GHSA-4fp5-977c-5g2w