CVE-2009-3028 json
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notificatio…
published 2011-03-07 15 y ago modified 2026-06-16 4 mo ago also EUVD-2009-3012
- cvss
- 6.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 42.6%
- EPSS 42.6% chance of exploitation in 30 days, percentile 98%
- public exploits
- 2
- Metasploit, Exploit-DB
Summary
The Altiris eXpress NS SC Download ActiveX control in AeXNSPkgDLLib.dll, as used in Symantec Altiris Deployment Solution 6.9.x, Notification Server 6.0.x, and Symantec Management Platform 7.0.x exposes an unsafe method, which allows remote attackers to force the download of arbitrary files and possibly execute arbitrary code via the DownloadAndInstall method.
Patch / fix
Timeline
- First public exploit (Metasploit exploit/windows/browser/symantec_altirisdeployment_downloadandinstall)
- Published
Exploit prediction
42.60% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/windows/browser/symantec_altirisdeployment_downloadandinstall Symantec Altiris Deployment Solution ActiveX Control Arbitrary File Download and Execute metasploit exploit, excellent rank, 2009-09-09
- EDB-16600 Symantec Altiris Deployment Solution - ActiveX Control Arbitrary File Download and Execute (Metasploit) remote, 2010-11-24
- securityfocus.com http://www.securityfocus.com/bid/36346 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
References
-
symantec.com
/business/support/index?page=content&id=TECH44885
patch
-
securityfocus.com
/bid/36346
vdb-entry, exploit
-
secunia.com
/advisories/36679
third-party-advisory, vendor-advisory
-
osvdb.org
/57893
vdb-entry
- symantec.com /security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2009&suid=2009
Sources
- CVE List CVE-2009-3028
- NVD CVE-2009-3028
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.