CVE-2004-2609

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information (an unencrypted password for a Windows domain account) via four "stuffit /f:stuffit.dat" invocations, possibly due to a buffer overflow.

Affected products

Symantec Powerquest Deploycenter: 5.5

References

http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1180.html
http://securitytracker.com/id?1011081
http://www.osvdb.org/9276
http://www.securityfocus.com/bid/11068
https://exchange.xforce.ibmcloud.com/vulnerabilities/17147
http://archives.neohapsis.com/archives/fulldisclosure/2004-08/1180.html
http://securitytracker.com/id?1011081
http://www.osvdb.org/9276
http://www.securityfocus.com/bid/11068
https://exchange.xforce.ibmcloud.com/vulnerabilities/17147

Get alerted when CVE-2004-2609 or the next vulnerability affects your stack