Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.
References
Configurations
History
21 Nov 2024, 00:08
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/11576 - Vendor Advisory | |
References | () http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english - URL Repurposed | |
References | () http://www.vupen.com/english/advisories/2006/1041 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/25415 - |
14 Feb 2024, 01:17
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english - URL Repurposed |
Information
Published : 2006-03-24 11:02
Updated : 2024-11-21 00:08
NVD link : CVE-2006-1381
Mitre link : CVE-2006-1381
CVE.ORG link : CVE-2006-1381
JSON object : View
Products Affected
trend_micro
- officescan
CWE