CVE-2010-0109 describes a denial-of-service vulnerability in the DBManager component of Symantec Altiris Deployment Solution 6.9.x prior to SP4. This medium-severity flaw (CVSS 6.5) can be triggered by an unauthenticated remote attacker sending a crafted request, leading to service disruption. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has seen some community discussion and media coverage, indicating awareness despite its age.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
6.9CPE matchmatch criteria | cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:* | ||
6.9CPE matchmatch criteria | cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:* | ||
6.9CPE matchmatch criteria | cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:* | ||
6.9CPE matchmatch criteria | cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3:*:*:*:*:*:* | ||
6.9.164CPE matchmatch criteria | cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.