Altiris Carbon Copy Remote Control System Local Privilege Escalation Vulnerabilities

Bugtraq ID:	11500
Class:	Design Error
CVE:	CVE-2004-1624
Remote:	No
Local:	Yes
Published:	Oct 21 2004 12:00AM
Updated:	Aug 28 2008 03:34AM
Credit:	Discovery of one of these vulnerabilities is credited to KF <[email protected]>. The vendor disclosed another issue.
Vulnerable:	Altiris Deployment Server 6.1 SP1 Altiris Deployment Server 6.1 Altiris Deployment Server 6.0 Altiris Deployment Server 5.5 Altiris Deployment Server 5.0.1 Altiris Carbon Copy Solution Agent 6.0 Altiris Carbon Copy Solution Agent 5.0 Altiris Carbon Copy Solution + Altiris Client Management Suite + Altiris Server Management Suite Altiris Carbon Copy Consumer Console 6.0 Altiris Carbon Copy Consumer Console 5.0 Altiris Carbon Copy Consumer Client 6.0 Altiris Carbon Copy Consumer Client 5.0
Not Vulnerable:	Altiris Carbon Copy Solution 6.1

Altiris Carbon Copy Remote Control System Local Privilege Escalation Vulnerabilities

Altiris Carbon Copy Remote Control allows local users to gain elevated privileges because it allows users to launch applications with higher privileges through Carbon Copy.

Exploiting these issues can allow a local attacker to gain SYSTEM-level privileges.

Altiris Carbon Copy Remote Control System Local Privilege Escalation Vulnerabilities

An exploit is not required.

Altiris Carbon Copy Remote Control System Local Privilege Escalation Vulnerabilities

Solution:
The vendor has addressed this issue in Carbon Copy Solution 6.1. Please see the references for more information.

Altiris Carbon Copy Remote Control System Local Privilege Escalation Vulnerabilities

References:

• Carbon Copy Solution Release Notes 6.1 HF1 (Altiris)
  
• Deployment Server Page (Altiris)
  
• [Fwd: Altiris Carbon Copy Remote Control local SYSTEM exploitation.] (KF_lists )
  
• Re: Critical Vulnerability in Altiris Deployment Server architecture (KF_lists )