CVE-2004-2622

critical

Description

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17814

https://euvd.enisa.europa.eu/vulnerability/EUVD-2004-2613

http://www.securityfocus.com/bid/11498

http://www.osvdb.org/11031

http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859

http://securitytracker.com/id?1011862

http://secunia.com/advisories/12944

http://packetstorm.linuxsecurity.com/0410-advisories/index2.html

http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html

http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html

Details

Source: Mitre, NVD

Published: 2004-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H