CVE Vulnerabilities

CVE-2004-1624

Published: Oct 21, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe).

Affected Software

Name Vendor Start Version End Version
Carbon_copy Altiris 5.0 (including) 5.0 (including)
Carbon_copy Altiris 6.0 (including) 6.0 (including)

References