Insomnia Security Vulnerability Advisory – Altiris deployment solution listens for connections from the Altiris client on port 402. It is possible to make a request that will result in the exploitation of a SQL Injection vulnerability. This leads to database access under the context of the Deployment server, which typically then allows, command execution under the context of the SQL Server. Versions 6.8.x and 6.9.x are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/66513/ISVA-080516.1.txt
Source: https://packetstormsecurity.com/files/66513/ISVA-080516.1.txt.html