Vulnerability CVE-2007-2023
Published: 2007-04-13   Modified: 2012-02-12

Description:
USB20.dll in Secustick USB flash drive decouples the authorization and file access routines, which allows local users to bypass authentication requirements by altering the return value of the VerifyPassWord function.

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.2/10
10/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Secustick -> Secustick usb flash drive 

 References:
http://tweakers.net/reviews/683
http://tweakers.net/reviews/682
http://osvdb.org/41592
Copyright 2024, cxsecurity.com

 

Back to Top