Vulnerability CVE-2006-1380

Vulnerability CVE-2006-1380

Published: 2006-03-24 Modified: 2012-02-12

Description:

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.2/10	10/10	3.9/10

Exploit range	Attack complexity	Authentication
Local	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Trend micro -> Interscan messaging security suite
Trendmicro -> Interscan messaging security suite

References:

http://secunia.com/advisories/19022

http://xforce.iss.net/xforce/xfdb/25415

Copyright 2024, cxsecurity.com