CVE-2004-2622

Public PoC / Exploit (1)

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.

Affected Products (5)

altiris · deployment_server_extension_for_ibm_directorvulnerable

References (18)

http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html

http://packetstorm.linuxsecurity.com/0410-advisories/index2.html

http://secunia.com/advisories/12944

Vendor Advisory

http://securitytracker.com/id?1011862

Vendor Advisory

http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859

http://www.osvdb.org/11031

http://www.securityfocus.com/bid/11498

https://exchange.xforce.ibmcloud.com/vulnerabilities/17814

http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html

http://packetstorm.linuxsecurity.com/0410-advisories/index2.html

http://secunia.com/advisories/12944

Vendor Advisory

http://securitytracker.com/id?1011862

Vendor Advisory

http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859

http://www.osvdb.org/11031

http://www.securityfocus.com/bid/11498

https://exchange.xforce.ibmcloud.com/vulnerabilities/17814