Lucene search

K
nvd[email protected]NVD:CVE-2008-1140
HistoryMar 04, 2008 - 8:44 p.m.

CVE-2008-1140

2008-03-0420:44:00
CWE-264
web.nvd.nist.gov

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

DLMFDISK.sys 1.2.0.27 in DESlock+ 3.2.6 and earlier allows local users to gain privileges via a certain DLKFDISK_IOCTL request to \.\DLKFDisk_Control that overwrites a data structure associated with a mounted pseudo-filesystem, aka the “ring0 SYSTEM” vulnerability.

Affected configurations

NVD
Node
deslockdeslockRange3.2.6

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

Related for NVD:CVE-2008-1140