PT-2002-1338 · Identix · Identix Biologon

Publicado 2002-05-03 · Atualizado 2016-10-18 · CVE-2002-0268

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Identix BioLogon version 3

Description The issue allows users with physical access to the system to gain administrative privileges. This can be achieved by using the CTRL-ALT-DEL combination and running a "Browse" function, which in turn runs Explorer with SYSTEM privileges.

Recommendations For Identix BioLogon version 3, consider restricting physical access to the system and limiting the use of the "Browse" function to prevent exploitation. As a temporary workaround, consider disabling the "Browse" function until a more permanent solution is available.

Correção

Identificadores relacionados

CVE-2002-0268

Produtos afetados

Identix Biologon

Referências · 4

• http://marc.info/?l=bugtraq&m=101366270807034&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0268 · Nota de Segurança
• http://iss.net/security_center/static/8201.php · Nota
• http://securityfocus.com/bid/4101 · Nota