PT-2004-2966 · Symantec · Altiris Client Service

Publicado 2004-12-31 · Atualizado 2008-09-05 · CVE-2004-2070

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Altiris Client Service for Windows version 5.6 SP1 Hotfix E (5.6.181)

Description The issue allows local users to execute arbitrary commands. This is achieved by opening the AClient tray icon and using the View Log File option.

Recommendations For version 5.6 SP1 Hotfix E (5.6.181), consider restricting access to the View Log File option in the AClient tray icon to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-2070

Produtos afetados

Altiris Client Service

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2004-2070 · Nota de Segurança
• http://securityfocus.com/archive/1/381649 · Nota