CVE-2004-2609: Symantec Powerquest Deploycenter

Low severity, CVSS 2.1. EPSS: 0.4% chance of exploitation in the next 30 days.

The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain sensitive information (an unencrypted password for a Windows domain account) via four "stuffit /f:stuffit.dat" invocations, possibly due to a buffer overflow.

Affected products

• Symantec Powerquest Deploycenter: version 5.5 only

Published 2004-12-31. Last modified 2026-06-16.