CVE-2005-1590 EXPLOIT
4.6
MEDIUM · CVSS 2.0 · EPSS 0.9% (pctl 59)
Patch early
A public exploit exists.
Description
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" option, then opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2004-2070.
Scoring
| CVSS | 4.6 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 0.92% — more likely to be exploited than 59% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2005-05-16 |
| Last modified | 2026-06-16 |
Affected (2)
| Vendor | Product |
|---|---|
| altiris | client service |
| altiris | deployment solution |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Altiris Deployment Solution 5.6 - Client Service Privilege Escalation | 2004-11-19 |
References
→ the Explorer · watch your stack · NVD