11 lines
No EOL
791 B
Text
11 lines
No EOL
791 B
Text
source: https://www.securityfocus.com/bid/11709/info
|
|
|
|
Altiris Deployment Solution Client allows a user to activate the client interface by easily launching the software from an icon in the Windows system tray. It is reported that a local user may exploit the client interface to escalate privileges.
|
|
|
|
It should be noted that although this vulnerability is reported to exist in Altiris Deployment Solution version 5.6 SP1 (Hotfix E) other versions might also be affected.
|
|
|
|
1. Right click on the Altiris Client Service icon in the Taskbar and choose View Log File
|
|
2. Notepad should open. Click File, click Open
|
|
3. In the Files of type: field choose All Files
|
|
4. Navagate to '%WINDIR%\System32'. Right click on 'cmd.exe' and choose Open
|
|
6. A new command shell with launch with SYSTEM privileges |