CVE-2004-2609: The stuffit.com executable on Symantec PowerQuest DeployCenter 5.5 boot disks allows local users to obtain...

Security readout for executives and security teams

This vulnerability concerns old Symantec PowerQuest DeployCenter 5.5 boot disks. A local user with access to the disk could recover an unencrypted Windows domain account password from bundled tooling. Business risk depends on whether those disks, images, or embedded domain credentials still exist and whether the account remains valid. Exposure is likely limited to environments that still store, use, or have archived PowerQuest DeployCenter 5.5 boot disks or disk images containing domain credentials. Risk is higher if the embedded Windows domain account still exists, has broad privileges, or reused credentials elsewhere. Treat this as a legacy credential exposure issue, not a broad internet-facing emergency. Prioritize if old deployment media may still exist or if historical domain deployment accounts were never rotated. Mitigation focus: Inventory DeployCenter 5.5 boot disks, images, and archives.; Retire or securely destroy boot media containing embedded credentials.; Rotate any domain account password ever embedded in those boot disks..

Prepared

Jun 29, 2026, 16:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.