CVE-2004-1624

Published: Oct 21, 2004Modified: Apr 16, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe).

Affected (2)

Products: Altiris: Carbon Copy

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Altiris Carbon Copy	Version 5.0
Altiris Carbon Copy	Version 6.0

References (8)

http://marc.info/?l=bugtraq&m=109846296406459&w=2

Source: cve@mitre.org

http://secunia.com/advisories/12962

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/11500

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17838

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=109846296406459&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/12962

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/11500

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/17838

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.