CVE-2005-1590 json
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative…
published 2005-05-16 21 y ago modified 2026-06-16 4 mo ago also EUVD-2005-1593
- cvss
- 4.6
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.9%
- EPSS 0.9% chance of exploitation in 30 days, percentile 60%
- public exploits
- 1
- Exploit-DB
Summary
The Altiris Client Service for Windows (ACLIENT.EXE) 6.0.88 allows local users to disable password protection and access the administrative interface by finding and showing the "Altiris Client Service" hidden window, disabling the password protection, disabling the "Hide client tray icon box" option, then opening the AClient tray icon and using the View Log File option, a different vulnerability than CVE-2004-2070.
Timeline
- First public exploit (EDB-24754)
- Published
Exploit prediction
0.92% chance of exploitation in the next 30 days, higher than 60% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-24754 Altiris Deployment Solution 5.6 - Client Service Privilege Escalation local, 2004-11-19
- osvdb.org http://www.osvdb.org/15897 referenced PoC, tagged "exploit" by a source, unverified
- archives.neohapsis.com http://archives.neohapsis.com/archives/fulldisclosure/2005-04/0614.html referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.6 | AV:L/AC:L/Au:N/C:P/I:P/A:P |
References
-
osvdb.org
/15897
vdb-entry, exploit, vendor-advisory
-
archives.neohapsis.com
/archives/fulldisclosure/2005-04/0614.html
mailing-list, exploit, vendor-advisory
-
secunia.com
/advisories/15159
third-party-advisory, vendor-advisory
Sources
- CVE List CVE-2005-1590
- NVD CVE-2005-1590
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.