CVE-2009-3028
CVE-2009-3028 is a medium-severity vulnerability in Symantec Altiris Deployment Solution with a CVSS 2.0 base score of 6.8. Its EPSS exploit-prediction score of 43% places it in the 99th percentile, indicating an elevated likelihood of exploitation.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.8)
- EPSS exploit prediction: 43% (99th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Symantec Altiris Deployment Solution
- Published:
- Last modified:
Description
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.
Frequently asked questions
- What is CVE-2009-3028?
- The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.
- How severe is CVE-2009-3028?
- CVE-2009-3028 has a CVSS 2.0 base score of 6.8, rated medium severity.
- Is CVE-2009-3028 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 43% (99th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2009-3028?
- CVE-2009-3028 primarily affects Symantec Altiris Deployment Solution. In total, 30 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2009-3028?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2009-3028 published?
- CVE-2009-3028 was published on 2011-03-07 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/36679
- http://www.osvdb.org/57893
- http://www.securityfocus.com/bid/36346
- http://www.symantec.com/business/support/index?page=content&id=TECH44885
- http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=20090922_00
Affected products (30)
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp4:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1_hf12:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r1:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r10:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r11:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r12:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r13:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r2:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r3:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r4:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r5:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r6:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r7:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r8:*:*:*:*:*:*
- cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r9:*:*:*:*:*:*
- cpe:2.3:a:symantec:management_platform:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:symantec:management_platform:7.0:rc5:*:*:*:*:*:*
- cpe:2.3:a:symantec:management_platform:7.0:sp1:*:*:*:*:*:*
- cpe:2.3:a:symantec:management_platform:7.0:sp2:*:*:*:*:*:*
- cpe:2.3:a:symantec:management_platform:7.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:symantec:management_platform:7.0:sp4:*:*:*:*:*:*
- cpe:2.3:a:symantec:management_platform:7.0:sp5:*:*:*:*:*:*
More vulnerabilities in Symantec Altiris Deployment Solution
- CVE-2009-3179 — Critical (CVSS 10.0): Multiple unspecified vulnerabilities in Symantec Altiris Deployment Solution 6.9 might allow remote attackers to…
- CVE-2009-3033 — Critical (CVSS 9.3): Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in…
- CVE-2009-3031 — Critical (CVSS 9.3): Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control…
- CVE-2009-3109 — Critical (CVSS 9.3): Unspecified vulnerability in the AClient agent in Symantec Altiris Deployment Solution 6.9.x before 6.9 SP3 Build 430,…
- CVE-2008-4564 — Critical (CVSS 9.3): Stack-based buffer overflow in wp6sr.dll in the Autonomy KeyView SDK 10.4 and earlier, as used in IBM Lotus Notes,…
- CVE-2009-3178 — High (CVSS 7.8): Unspecified vulnerability in mm.exe in Symantec Altiris Deployment Solution 6.9 allows remote attackers to cause a…