axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Altiris_deployment_solution | Symantec | 6.9 (including) | 6.9.176 (excluding) |
| Altiris_deployment_solution | Symantec | 6.8 (including) | 6.8 (including) |
| Altiris_deployment_solution | Symantec | 6.8-sp1 (including) | 6.8-sp1 (including) |
| Altiris_deployment_solution | Symantec | 6.8-sp2 (including) | 6.8-sp2 (including) |