Altiris Deployment Server Remote Command Execution Vulnerability
BID:11498
Info
Altiris Deployment Server Remote Command Execution Vulnerability
| Bugtraq ID: | 11498 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 21 2004 12:00AM |
| Updated: | Oct 21 2004 12:00AM |
| Credit: | Brian Gallagher <[email protected]> disclosed this vulnerability. |
| Vulnerable: |
Altiris Deployment Server 6.1 SP1 Altiris Deployment Server 6.1 Altiris Deployment Server 6.0 Altiris Deployment Server 5.5 Altiris Deployment Server 5.0.1 |
| Not Vulnerable: | |
Discussion
Altiris Deployment Server Remote Command Execution Vulnerability
Altiris Deployment Server is reported vulnerable to a remote command execution vulnerability in the client portion of the software. This is due to a failure of the application to properly authenticate that commands originate from an authorized server.
This vulnerability allows attackers with local access to a network to impersonate a valid deployment server and issue arbitrary commands to the client computers.
Update: It is also reported that this issue can allow remote attackers to gain control of a vulnerable computer through the Altiris remote control feature. It is conjectured that this may allow the attacker to completely compromise the affected computer.
Altiris Deployment Server is reported vulnerable to a remote command execution vulnerability in the client portion of the software. This is due to a failure of the application to properly authenticate that commands originate from an authorized server.
This vulnerability allows attackers with local access to a network to impersonate a valid deployment server and issue arbitrary commands to the client computers.
Update: It is also reported that this issue can allow remote attackers to gain control of a vulnerable computer through the Altiris remote control feature. It is conjectured that this may allow the attacker to completely compromise the affected computer.
Exploit / POC
Altiris Deployment Server Remote Command Execution Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Altiris Deployment Server Remote Command Execution Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Altiris Deployment Server Remote Command Execution Vulnerability
References:
References:
- Deployment Server Page (Altiris)
- Critical Vulnerability in Altiris Deployment Server architecture (Brian Gallagher