CVE-2004-2622 AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator...
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| altiris deployment server extension for ibm director | = 5.0.1 | No fix listed |
| altiris deployment server extension for ibm director | = 5.5 | No fix listed |
| altiris deployment server extension for ibm director | = 6.0 | No fix listed |
| altiris deployment server extension for ibm director | = 6.1 | No fix listed |
| altiris deployment server extension for ibm director | = 6.1-sp1 | No fix listed |
References
- 20041021 Critical Vulnerability in Altiris Deployment Server architecture mailing-list vendor-advisory
- 20041025 RE: Critical Vulnerability in Altiris Deployment Server architecture mailing-list
- packetstorm.linuxsecurity.com
- 12944 third-party-advisory vendor-advisory
- 1011862 vdb-entry vendor-advisory
- www.altiris.com
- 11031 vdb-entry
- 11498 vdb-entry
- altiris-gain-unauth-access(17814) vdb-entry