Vulnerability Description
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" option, then opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2004-2070.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Altiris | Client Service | 6.0.88 |
| Altiris | Deployment Solution | 5.6 |
References
- http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0614.htmlExploitVendor Advisory
- http://secunia.com/advisories/15159Vendor Advisory
- http://www.osvdb.org/15897ExploitVendor Advisory
- http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0614.htmlExploitVendor Advisory
- http://secunia.com/advisories/15159Vendor Advisory
- http://www.osvdb.org/15897ExploitVendor Advisory
FAQ
What is CVE-2005-1590?
CVE-2005-1590 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service...
How severe is CVE-2005-1590?
CVE-2005-1590 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2005-1590?
Check the references section above for vendor advisories and patch information. Affected products include: Altiris Client Service, Altiris Deployment Solution.