CVE-2004-2622

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2004-12-31 · updated 2026-06-16

Description

AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.

Affected products

Altiris Deployment Server Extension For Ibm Director: 5.0.1, 5.5, 6.0, 6.1, 6.1-sp1

References

http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html
http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html
http://packetstorm.linuxsecurity.com/0410-advisories/index2.html
http://secunia.com/advisories/12944
http://securitytracker.com/id?1011862
http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc&art=AKB6859&source=Altiris%20Helpdesk&artID=23644&refpara=532392&key=akb6859
http://www.osvdb.org/11031
http://www.securityfocus.com/bid/11498
https://exchange.xforce.ibmcloud.com/vulnerabilities/17814
http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html
http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html
http://packetstorm.linuxsecurity.com/0410-advisories/index2.html

Get alerted when CVE-2004-2622 or the next vulnerability affects your stack