CVE-2004-2622

EPSS 1.73%
Veröffentlicht 31.12.2004 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Altiris ≫ Deployment Server Extension For Ibm Director Version5.0.1

Altiris ≫ Deployment Server Extension For Ibm Director Version5.5

Altiris ≫ Deployment Server Extension For Ibm Director Version6.0

Altiris ≫ Deployment Server Extension For Ibm Director Version6.1

Altiris ≫ Deployment Server Extension For Ibm Director Version6.1 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.73%	0.807

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html

http://packetstorm.linuxsecurity.com/0410-advisories/index2.html

http://secunia.com/advisories/12944

Vendor Advisory

http://securitytracker.com/id?1011862

Vendor Advisory

http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859

http://www.osvdb.org/11031

http://www.securityfocus.com/bid/11498

https://exchange.xforce.ibmcloud.com/vulnerabilities/17814

https://nvd.nist.gov/vuln/detail/CVE-2004-2622

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2622

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2622

EUVD