CVEvulnerability

CVE-2004-2622

10.0 HIGH Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.

Affected configurations

• altiris deployment server extension for ibm director 5.0.1 • altiris deployment server extension for ibm director 5.5 • altiris deployment server extension for ibm director 6.0 • altiris deployment server extension for ibm director 6.1

References