CVE-2004-2622

EPSS 1.73%
Published 31.12.2004 05:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Altiris ≫ Deployment Server Extension For Ibm Director Version5.0.1

Altiris ≫ Deployment Server Extension For Ibm Director Version5.5

Altiris ≫ Deployment Server Extension For Ibm Director Version6.0

Altiris ≫ Deployment Server Extension For Ibm Director Version6.1

Altiris ≫ Deployment Server Extension For Ibm Director Version6.1 Updatesp1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.73%	0.807

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	10	10	10	AV:N/AC:L/Au:N/C:C/I:C/A:C

http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html

http://packetstorm.linuxsecurity.com/0410-advisories/index2.html

http://secunia.com/advisories/12944

Vendor Advisory

http://securitytracker.com/id?1011862

Vendor Advisory

http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859

http://www.osvdb.org/11031

http://www.securityfocus.com/bid/11498

https://exchange.xforce.ibmcloud.com/vulnerabilities/17814

https://nvd.nist.gov/vuln/detail/CVE-2004-2622

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2622

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2622

EUVD