Lucene search

K
cveMitreCVE-2006-0951
HistoryApr 08, 2006 - 1:04 a.m.

CVE-2006-0951

2006-04-0801:04:00
mitre
web.nvd.nist.gov
22
nod32
nod32.exe
privilege escalation
cve-2006-0951
security vulnerability
scheduled scan

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0

Percentile

15.7%

The GUI (nod32.exe) in NOD32 2.5 runs with SYSTEM privileges when the scheduler runs a scheduled on-demand scan, which allows local users to execute arbitrary code during a scheduled scan via unspecified attack vectors.

Affected configurations

Nvd
Node
eset_softwarenod32_antivirusMatch2.5
VendorProductVersionCPE
eset_softwarenod32_antivirus2.5cpe:2.3:a:eset_software:nod32_antivirus:2.5:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

High

EPSS

0

Percentile

15.7%

Related for CVE-2006-0951