How severe is CVE-2009-3035?

CVE-2009-3035 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2009-3035 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (30th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2009-3035?

CVE-2009-3035 primarily affects Symantec Altiris Notification Server. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2009-3035?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2009-3035 published?

CVE-2009-3035 was published on 2010-02-02 and last updated on 2026-06-16.

CVE-2009-3035

CVE-2009-3035 is a medium-severity vulnerability in Symantec Altiris Notification Server with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-255.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 0% (30th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-255
Affected product: Symantec Altiris Notification Server
Published: 2010-02-02
Last modified: 2026-06-16

Description

The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credentials and certain discovery credentials, and stores this key on the Notification Server machine, which allows local users to obtain sensitive information and possibly execute arbitrary code by decrypting and using these credentials.

Frequently asked questions

What is CVE-2009-3035?: The web console in Symantec Altiris Notification Server 6.0.x before 6.0 SP3 R12 uses a hardcoded key that can decrypt SQL Server credentials and certain discovery credentials, and stores this key on the Notification Server machine, which allows local users to obtain sensitive information and possibly execute arbitrary code by decrypting and using these credentials.
How severe is CVE-2009-3035?: CVE-2009-3035 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2009-3035 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (30th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2009-3035?: CVE-2009-3035 primarily affects Symantec Altiris Notification Server. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2009-3035?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2009-3035 published?: CVE-2009-3035 was published on 2010-02-02 and last updated on 2026-06-16.

References

Affected products (6)

cpe:2.3:a:symantec:altiris_notification_server:6.0:*:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_notification_server:6.0:sp1:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_notification_server:6.0:sp2:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r7:*:*:*:*:*:*
cpe:2.3:a:symantec:altiris_notification_server:6.0:sp3_r8:*:*:*:*:*:*

More vulnerabilities in Symantec Altiris Notification Server

CVE-2009-3033 — Critical (CVSS 9.3): Buffer overflow in the RunCmd method in the Altiris eXpress NS Console Utilities ActiveX control in…
CVE-2009-3031 — Critical (CVSS 9.3): Stack-based buffer overflow in the BrowseAndSaveFile method in the Altiris eXpress NS ConsoleUtilities ActiveX control…
CVE-2009-3028 — Medium (CVSS 6.8): The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment…
CVE-2008-2794 — Medium (CVSS 6.8): Unspecified vulnerability in the GUI in Symantec Altiris Notification Server Agent 6.x before 6.0 SP3 R8 allows local…
CVE-2008-0716 — Medium (CVSS 6.8): The agent in Symantec Altiris Notification Server before 6.0 SP3 R7 allows local users to gain privileges via a…

All CVEs affecting Symantec Altiris Notification Server →

Other CWE-255 (Credentials Management Errors) vulnerabilities

CVE-2016-0898 — Critical (CVSS 10.0): MySQL for PCF tiles 1.7.x before 1.7.10 were discovered to log the AWS access key in plaintext. These credentials were…
CVE-2015-7906 — Critical (CVSS 10.0): LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash…
CVE-2015-7856 — Critical (CVSS 10.0): OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access…
CVE-2014-9736 — Critical (CVSS 10.0): GE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of initinit for the (1) SSL key…
CVE-2014-7233 — Critical (CVSS 10.0): GE Healthcare Precision THUNIS-800+ has a default password of (1) 1973 for the factory default System Utilities menu,…
CVE-2014-7232 — Critical (CVSS 10.0): GE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2) 4$xray for the xruser…

Browse all CWE-255 (Credentials Management Errors) vulnerabilities →