A vulnerability has been reported in Symantec Altiris Notification Server, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an error in the Symantec Altiris Notification Server Agent, which can be exploited via shatter attacks to execute arbitrary code with escalated privileges.

The vulnerability affects version 6.x (all builds) prior to 6.0 SP3 R7.

Solution
Apply the update on the Notification Server and update all the agent machines. Please see the vendor's advisory for details.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Brett Moore of Insomnia Security.

Changelog
Further details available in Customer Area

Original Advisory
SYM008-002:
http://securityresponse.symantec.com/avcenter/security/Content/2008.02.06.html

Deep Links
Links available in Customer Area