← back
CVE-2004-2622

CVE-2004-2622

EPSS 2.6%
AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.htmlhttp://archives.neohapsis.com/archives/bugtraq/2004-10/0266.htmlhttp://packetstorm.linuxsecurity.com/0410-advisories/index2.htmlhttp://secunia.com/advisories/12944http://securitytracker.com/id?1011862https://exchange.xforce.ibmcloud.com/vulnerabilities/17814http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859http://www.osvdb.org/11031http://www.securityfocus.com/bid/11498