Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for deployment_server_extension_for_ibm_director by altiris

    CVE-2004-2622 (GCVE-0-2004-2622)

    Vulnerability from cvelistv5 – Published: 2005-12-04 22:00 – Updated: 2024-08-08 01:36
    VLAI
    Summary
    AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/bid/11498 vdb-entryx_refsource_BID
    http://www.osvdb.org/11031 vdb-entryx_refsource_OSVDB
    http://www.altiris.com/support/forum/Framesearch.… x_refsource_CONFIRM
    http://securitytracker.com/id?1011862 vdb-entryx_refsource_SECTRACK
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://secunia.com/advisories/12944 third-party-advisoryx_refsource_SECUNIA
    http://archives.neohapsis.com/archives/bugtraq/20… mailing-listx_refsource_BUGTRAQ
    http://archives.neohapsis.com/archives/bugtraq/20… mailing-listx_refsource_BUGTRAQ
    http://packetstorm.linuxsecurity.com/0410-advisor… x_refsource_CONFIRM
    Date Public
    2004-10-21 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:36:24.217Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "11498",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11498"
          },
          {
            "name": "11031",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/11031"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc\u0026art=AKB6859\u0026source=Altiris%20Helpdesk\u0026artID=23644\u0026refpara=532392\u0026key=akb6859"
          },
          {
            "name": "1011862",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1011862"
          },
          {
            "name": "altiris-gain-unauth-access(17814)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17814"
          },
          {
            "name": "12944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/12944"
          },
          {
            "name": "20041021 Critical Vulnerability in Altiris Deployment Server architecture",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html"
          },
          {
            "name": "20041025 RE: Critical Vulnerability in Altiris Deployment Server architecture",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://packetstorm.linuxsecurity.com/0410-advisories/index2.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "11498",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11498"
        },
        {
          "name": "11031",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/11031"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc\u0026art=AKB6859\u0026source=Altiris%20Helpdesk\u0026artID=23644\u0026refpara=532392\u0026key=akb6859"
        },
        {
          "name": "1011862",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1011862"
        },
        {
          "name": "altiris-gain-unauth-access(17814)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17814"
        },
        {
          "name": "12944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/12944"
        },
        {
          "name": "20041021 Critical Vulnerability in Altiris Deployment Server architecture",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html"
        },
        {
          "name": "20041025 RE: Critical Vulnerability in Altiris Deployment Server architecture",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://packetstorm.linuxsecurity.com/0410-advisories/index2.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-2622",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "11498",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11498"
            },
            {
              "name": "11031",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/11031"
            },
            {
              "name": "http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc\u0026art=AKB6859\u0026source=Altiris%20Helpdesk\u0026artID=23644\u0026refpara=532392\u0026key=akb6859",
              "refsource": "CONFIRM",
              "url": "http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc\u0026art=AKB6859\u0026source=Altiris%20Helpdesk\u0026artID=23644\u0026refpara=532392\u0026key=akb6859"
            },
            {
              "name": "1011862",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1011862"
            },
            {
              "name": "altiris-gain-unauth-access(17814)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17814"
            },
            {
              "name": "12944",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/12944"
            },
            {
              "name": "20041021 Critical Vulnerability in Altiris Deployment Server architecture",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html"
            },
            {
              "name": "20041025 RE: Critical Vulnerability in Altiris Deployment Server architecture",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html"
            },
            {
              "name": "http://packetstorm.linuxsecurity.com/0410-advisories/index2.html",
              "refsource": "CONFIRM",
              "url": "http://packetstorm.linuxsecurity.com/0410-advisories/index2.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-2622",
    "datePublished": "2005-12-04T22:00:00.000Z",
    "dateReserved": "2005-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-08T01:36:24.217Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2004-2622 (GCVE-0-2004-2622)

    Vulnerability from nvd – Published: 2005-12-04 22:00 – Updated: 2024-08-08 01:36
    VLAI
    Summary
    AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://www.securityfocus.com/bid/11498 vdb-entryx_refsource_BID
    http://www.osvdb.org/11031 vdb-entryx_refsource_OSVDB
    http://www.altiris.com/support/forum/Framesearch.… x_refsource_CONFIRM
    http://securitytracker.com/id?1011862 vdb-entryx_refsource_SECTRACK
    https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
    http://secunia.com/advisories/12944 third-party-advisoryx_refsource_SECUNIA
    http://archives.neohapsis.com/archives/bugtraq/20… mailing-listx_refsource_BUGTRAQ
    http://archives.neohapsis.com/archives/bugtraq/20… mailing-listx_refsource_BUGTRAQ
    http://packetstorm.linuxsecurity.com/0410-advisor… x_refsource_CONFIRM
    Date Public
    2004-10-21 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T01:36:24.217Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "11498",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/11498"
          },
          {
            "name": "11031",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/11031"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc\u0026art=AKB6859\u0026source=Altiris%20Helpdesk\u0026artID=23644\u0026refpara=532392\u0026key=akb6859"
          },
          {
            "name": "1011862",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1011862"
          },
          {
            "name": "altiris-gain-unauth-access(17814)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17814"
          },
          {
            "name": "12944",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/12944"
          },
          {
            "name": "20041021 Critical Vulnerability in Altiris Deployment Server architecture",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html"
          },
          {
            "name": "20041025 RE: Critical Vulnerability in Altiris Deployment Server architecture",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://packetstorm.linuxsecurity.com/0410-advisories/index2.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2004-10-21T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-07-19T15:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "11498",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/11498"
        },
        {
          "name": "11031",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/11031"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc\u0026art=AKB6859\u0026source=Altiris%20Helpdesk\u0026artID=23644\u0026refpara=532392\u0026key=akb6859"
        },
        {
          "name": "1011862",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1011862"
        },
        {
          "name": "altiris-gain-unauth-access(17814)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17814"
        },
        {
          "name": "12944",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/12944"
        },
        {
          "name": "20041021 Critical Vulnerability in Altiris Deployment Server architecture",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html"
        },
        {
          "name": "20041025 RE: Critical Vulnerability in Altiris Deployment Server architecture",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://packetstorm.linuxsecurity.com/0410-advisories/index2.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2004-2622",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "AClient.exe in Altiris Deployment Solution 6.x and 5.x does not require authentication from the first Deployment Server that it connects to, which allows remote malicious servers to gain administrator access."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "11498",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/11498"
            },
            {
              "name": "11031",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/11031"
            },
            {
              "name": "http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc\u0026art=AKB6859\u0026source=Altiris%20Helpdesk\u0026artID=23644\u0026refpara=532392\u0026key=akb6859",
              "refsource": "CONFIRM",
              "url": "http://www.altiris.com/support/forum/Framesearch.aspx?vpath=/aexkb/public%20articles/6.x/deployment%20solution/kb/ds%20client%20security%20kb%20article%2010-22-04.doc\u0026art=AKB6859\u0026source=Altiris%20Helpdesk\u0026artID=23644\u0026refpara=532392\u0026key=akb6859"
            },
            {
              "name": "1011862",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1011862"
            },
            {
              "name": "altiris-gain-unauth-access(17814)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17814"
            },
            {
              "name": "12944",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/12944"
            },
            {
              "name": "20041021 Critical Vulnerability in Altiris Deployment Server architecture",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0211.html"
            },
            {
              "name": "20041025 RE: Critical Vulnerability in Altiris Deployment Server architecture",
              "refsource": "BUGTRAQ",
              "url": "http://archives.neohapsis.com/archives/bugtraq/2004-10/0266.html"
            },
            {
              "name": "http://packetstorm.linuxsecurity.com/0410-advisories/index2.html",
              "refsource": "CONFIRM",
              "url": "http://packetstorm.linuxsecurity.com/0410-advisories/index2.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2004-2622",
    "datePublished": "2005-12-04T22:00:00.000Z",
    "dateReserved": "2005-12-04T00:00:00.000Z",
    "dateUpdated": "2024-08-08T01:36:24.217Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}