{"id":"CVE-2009-3107","aliases":["EUVD-2009-3090","GHSA-fc3j-3f83-7fhr"],"status":"published","title":"Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict...","description":"Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.","severity":{"version":"2.0","score":4.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00967,"percentile":0.61962,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2009-09-08T23:00:00Z","modified":"2026-06-16T23:10:57Z","products":[{"vendor":"symantec","product":"altiris_deployment_solution"}],"references":[{"url":"http://secunia.com/advisories/36502","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Broken Link","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/36110","tags":["vdb-entry","x_refsource_BID","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory\u0026pvid=security_advisory\u0026year=2009\u0026suid=20090826_00","tags":["x_refsource_CONFIRM","x_transferred","Broken Link"]},{"url":"http://www.securitytracker.com/id?1022779","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-3107"},{"url":"https://github.com/advisories/GHSA-fc3j-3f83-7fhr"}],"sources":{"cve":[{"id":"CVE-2009-3107","description":"Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.","status":"published","published":"2009-09-08T23:00:00Z","modified":"2024-08-07T06:14:56.367Z","updated_at":"2026-11-02T14:33:24.10565Z"}],"euvd":[{"id":"EUVD-2009-3090","description":"Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.","status":"published","published":"2009-09-08T23:00:00Z","modified":"2024-08-07T06:14:56Z","updated_at":"2026-11-03T01:39:15.098818Z"}],"ghsa":[{"id":"GHSA-fc3j-3f83-7fhr","title":"Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict...","description":"Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.","status":"published","published":"2022-05-02T03:41:45Z","modified":"2026-03-20T05:01:27Z","cwes":["CWE-287"],"updated_at":"2026-11-02T15:06:43.427844Z"}],"nvd":[{"id":"CVE-2009-3107","description":"Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430 does not properly restrict access to the listening port for the DBManager service, which allows remote attackers to bypass authentication and modify tasks or the Altiris Database via a connection to this service.","status":"published","published":"2009-09-08T23:30:00.563Z","modified":"2026-06-16T23:10:57.653Z","cvss":[{"version":"2.0","score":4.8,"vector":"AV:A/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:01:36.596719Z"}]}}