CVE-2008-2291

CVE-2008-2291 describes a vulnerability in Symantec Altiris Deployment Solution versions 6.8.x and 6.9.x prior to 6.9.176, where the axengine.exe component generates encrypted domain credentials using a fixed or absent salt. This flaw significantly eases the guessing of these credentials by remote attackers. With a CVSS score of 7.5 (High), it presents a network-based attack vector with low complexity, potentially leading to partial compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion, and it is not listed in CISA's KEV catalog.