The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information (an unencrypted password for a Windows domain account) via four "stuffit /f:stuffit.dat" invocations, possibly due to a buffer overflow.
References
Configurations
Information
Published : 2004-12-30 21:00
Updated : 2017-07-19 18:29
NVD link : CVE-2004-2609
Mitre link : CVE-2004-2609
JSON object : View
CWE
Products Affected
symantec
- powerquest_deploycenter