PT-2004-3512 · Symantec · Altiris Deployment Solution

Publicado 2004-12-31 · Atualizado 2017-07-20 · CVE-2004-2622

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Altiris Deployment Solution versions 5.x through 6.x

Description The issue concerns a lack of required authentication in AClient.exe, allowing remote malicious servers to gain administrator access if they are the first Deployment Server that AClient.exe connects to.

Recommendations For Altiris Deployment Solution versions 5.x through 6.x, consider implementing additional authentication mechanisms to ensure that only authorized Deployment Servers can connect to AClient.exe. As a temporary workaround, restrict access to AClient.exe to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2004-2622

Produtos afetados

Altiris Deployment Solution

Referências · 10

• http://secunia.com/advisories/12944 · Aviso do Fabricante
• http://securityfocus.com/bid/11498 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17814 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2622 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html · Aviso do Fabricante
• http://packetstorm.linuxsecurity.com/0410-advisories/index2.html · Nota
• http://securitytracker.com/id?1011862 · Aviso do Fabricante
• http://altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html · Nota
• http://osvdb.org/11031 · Nota