CVE-2005-1590
First published: Mon May 16 2005(Updated: )
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" option, then opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2004-2070.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Altiris Client Service | =6.0.88 | |
| Symantec Altiris Deployment Solution | =5.6-sp1 | |
| Symantec Altiris Deployment Solution | =5.6.181 | |
| Symantec Altiris Deployment Solution | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2005-1590?
CVE-2005-1590 is considered to be a medium severity vulnerability due to its impact on local user access to administrative functions.
How do I fix CVE-2005-1590?
To mitigate CVE-2005-1590, ensure that the Altiris Client Service is updated to a patched version that addresses this vulnerability.
Who is affected by CVE-2005-1590?
CVE-2005-1590 affects local users of Altiris Client Service versions 6.0.88, 5.6.181, and 5.6-sp1.
What can an attacker do with CVE-2005-1590?
An attacker with local access can disable password protection and gain access to administrative interfaces in affected versions of the Altiris Client Service.
Is there a workaround for CVE-2005-1590?
A potential workaround for CVE-2005-1590 is to restrict local administrative access until a patch is applied.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/altiris
- canonical/altiris client service
- version/altiris client service/6.0.88
- canonical/symantec altiris deployment solution
- version/symantec altiris deployment solution/5.6-sp1
- version/symantec altiris deployment solution/5.6.181
- version/symantec altiris deployment solution/6.0