PT-2004-2966 · Symantec · Altiris Client Service
Published
2004-12-31
·
Updated
2008-09-05
·
CVE-2004-2070
CVSS v2.0
7.2
High
| Vector | AV:L/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Altiris Client Service for Windows version 5.6 SP1 Hotfix E (5.6.181)
Description
The issue allows local users to execute arbitrary commands. This is achieved by opening the AClient tray icon and using the View Log File option.
Recommendations
For version 5.6 SP1 Hotfix E (5.6.181), consider restricting access to the View Log File option in the AClient tray icon to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Altiris Client Service