CVE-2004-1624

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-10-21 · updated 2026-06-16

Description

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe).

Affected products

Altiris Carbon Copy: 5.0, 6.0

References

http://marc.info/?l=bugtraq&m=109846296406459&w=2
http://secunia.com/advisories/12962
http://www.securityfocus.com/bid/11500
https://exchange.xforce.ibmcloud.com/vulnerabilities/17838
http://marc.info/?l=bugtraq&m=109846296406459&w=2
http://secunia.com/advisories/12962
http://www.securityfocus.com/bid/11500
https://exchange.xforce.ibmcloud.com/vulnerabilities/17838

Get alerted when CVE-2004-1624 or the next vulnerability affects your stack