CVE-2008-2287
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the...
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
Exploit likelihood
What each source reports
NVD Score used
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
- Record
CVE-2008-2287- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
- Record
CVE-2008-2287- Updated
- 2026-11-02
EUVDEUVD-2008-2284No score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
- Record
EUVD-2008-2284- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xpjc-cq5g-ggfpNo score
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the...
Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 does not properly protect the install directory, which might allow local users to gain privileges by replacing an application component with a Trojan horse.
- Record
GHSA-xpjc-cq5g-ggfp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-2287 is a high vulnerability (CVSS 7.2) in Symantec Altiris Deployment Solution, published May 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.35%, the 29th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/42442
vupen.com/english/advisories/2008/1542/references
marc.info?l=bugtraq&m=122167472229965&w=2
securityfocus.com/bid/29197
symantec.com/avcenter/security/Content/2008.05.14a.html
securitytracker.com/id?1020024
secunia.com/advisories/30261
nvd.nist.gov/vuln/detail/CVE-2008-2287
github.com/advisories/GHSA-xpjc-cq5g-ggfp