Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2011-03-07	CVE-2009-3028	Unspecified vulnerability in Symantec products The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method. network symantec	6.8
2010-02-02	CVE-2009-3035	Credentials Management vulnerability in Symantec Altiris Notification Server 6.0 The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credentials and certain discovery credentials, and stores this key on the Notification Server machine, which allows local users to obtain sensitive information and possibly execute arbitrary code by decrypting and using these credentials. local low complexity symantec CWE-255	4.3
2008-06-20	CVE-2008-2794	Permissions, Privileges, and Access Controls vulnerability in Symantec Altiris Notification Server 6.0 Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local users to gain privileges via unknown attack vectors. local low complexity symantec CWE-264	6.8
2008-02-12	CVE-2008-0716	Privilege Escalation vulnerability in Symantec Altiris Notification Server Agents Shatter Attack The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a "Shatter" style attack. local low complexity symantec	6.8