CVE-2008-6827

The ListView control in the Client GUI (AClient.exe) in Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 allows local users to gain SYSTEM privileges and execute arbitrary commands via a "Shatter" style attack on the "command prompt" hidden GUI button to (1) overwrite the CommandLine parameter to cmd.exe to use SYSTEM privileges and (2) modify the DLL that is loaded using the LoadLibrary API function.

• CWE-306

• http://marc.info/?l=bugtraq&m=122460544316205&w=2Mailing List
• http://osvdb.org/49426Broken Link
• http://secunia.com/advisories/31773Broken Link, Vendor Advisory
• http://www.insomniasec.com/advisories/ISVA-081020.1.htmBroken Link, Patch
• http://www.securityfocus.com/bid/31766Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021071Broken Link, Third Party Advisory, VDB Entry
• http://www.symantec.com/avcenter/security/Content/2008.10.20a.htmlBroken Link, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2008/2876Broken Link, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46006Third Party Advisory, VDB Entry
• http://marc.info/?l=bugtraq&m=122460544316205&w=2Mailing List
• http://osvdb.org/49426Broken Link
• http://secunia.com/advisories/31773Broken Link, Vendor Advisory
• http://www.insomniasec.com/advisories/ISVA-081020.1.htmBroken Link, Patch
• http://www.securityfocus.com/bid/31766Broken Link, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id?1021071Broken Link, Third Party Advisory, VDB Entry
• http://www.symantec.com/avcenter/security/Content/2008.10.20a.htmlBroken Link, Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2008/2876Broken Link, Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46006Third Party Advisory, VDB Entry

Published

Jun 8, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-6821Buffer overflow in the DAS server in IBM DB2 8 before FP17, …
• CVE-2008-6822Unrestricted file upload vulnerability in uploadp.php in New…
• CVE-2008-6823Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2008-6824The management interface on the A-LINK WL54AP3 and WL54AP2 a…
• CVE-2008-6825Directory traversal vulnerability in user/index.php in Fonal…
• CVE-2008-6826dhtml.pl in MHF Media Pro allows remote attackers to execute…
• CVE-2008-6828Symantec Altiris Deployment Solution 6.x before 6.9.355 SP1 …7.8
• CVE-2008-6829VicFTPS 5.0 allows remote attackers to cause a denial of ser…
• CVE-2008-6830The disconnection feature in Citrix Web Interface 5.0 and 5.…
• CVE-2008-6831Multiple cross-site scripting (XSS) vulnerabilities in Atlas…
• CVE-2008-6832Cross-site request forgery (CSRF) vulnerability in Atlassian…
• CVE-2008-6833Directory traversal vulnerability in commsrss.php in fuzzyli…