Lucene search

K
nvd[email protected]NVD:CVE-2008-0581
HistoryFeb 05, 2008 - 3:00 a.m.

CVE-2008-0581

2008-02-0503:00:00
CWE-264
web.nvd.nist.gov
3

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

0

Percentile

5.1%

Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, and constructing a modified batch file that specifies this password in the /password switch and specifies an arbitrary program in the /command switch.

Affected configurations

Nvd
Node
moernautlsrunaseMatch1.0
OR
moernautsupercryptMatch1.0
VendorProductVersionCPE
moernautlsrunase1.0cpe:2.3:a:moernaut:lsrunase:1.0:*:*:*:*:*:*:*
moernautsupercrypt1.0cpe:2.3:a:moernaut:supercrypt:1.0:*:*:*:*:*:*:*

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.8

Confidence

High

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2008-0581