Vulnerability Details CVE-2004-2622
AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.017
EPSS Ranking 81.6%
CVSS Severity
CVSS v2 Score 10.0
References
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html
- http://packetstorm.linuxsecurity.com/0410-advisories/index2.html
- http://secunia.com/advisories/12944
- http://securitytracker.com/id?1011862
- http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859
- http://www.osvdb.org/11031
- http://www.securityfocus.com/bid/11498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17814
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html
- http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html
- http://packetstorm.linuxsecurity.com/0410-advisories/index2.html
- http://secunia.com/advisories/12944
- http://securitytracker.com/id?1011862
- http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859
- http://www.osvdb.org/11031
- http://www.securityfocus.com/bid/11498
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17814
Products affected by CVE-2004-2622
-
cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:5.0.1
-
cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:5.5
-
cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:6.0
-
cpe:2.3:a:altiris:deployment_server_extension_for_ibm_director:6.1