Lucene search
HistoryMar 24, 2006 - 11:02 a.m.
CVE-2006-1381
cve-2006-1381
trend micro
officescan
dacls
system privileges
tmlisten.exe
security vulnerability
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
66.0%
Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.
Affected configurations
Node
trend_microofficescanMatch5.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| trend_micro:officescan | trend micro officescan | eq | 5.5 |
Related
nvd
nvd
CVE-2006-1381
2006-03-24 11:02:00
cvelist
cvelist
CVE-2006-1381
2006-03-24 11:00:00
prion
prion
Code injection
2006-03-24 11:02:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
66.0%
Related for CVE-2006-1381