Lucene search
HistoryJan 29, 2007 - 4:00 p.m.
CVE-2004-2676
spy sweeper
enterprise client
privilege escalation
nvd
cve-2004-2676
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functionality, which allows local users to gain privileges.
Affected configurations
Node
webroot_softwarespy_sweeper_enterpriseMatch1.5.1_build_3698
| CPE | Name | Operator | Version |
|---|---|---|---|
| webroot_software:spy_sweeper_enterprise | webroot software spy sweeper enterprise | eq | 1.5.1_build_3698 |
Related
cvelist
cvelist
CVE-2004-2676
2007-01-29 16:00:00
securityvulns
securityvulns
SpySweeper privilege escalation
2004-12-23 00:00:00
nvd
nvd
CVE-2004-2676
2004-12-31 05:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.6 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVE-2004-2676