PT-2004-2141 · Prevx · Prevx Home

Tan Chew Keong · Publicado 2004-12-15 · Atualizado 2017-07-11 · CVE-2004-1193

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Média

Vetor base

AV:L/AC:L/Au:N/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Prevx Home version 1.0

Description: The issue allows local users with administrator privileges to bypass intrusion prevention features. This is achieved by directly writing to the physical memory, which restores the running kernel's original SDT ServiceTable.

Recommendations: For Prevx Home version 1.0, consider restricting access to the physical memory to prevent bypassing of intrusion prevention features until a patch is available. As a temporary workaround, limit the privileges of local users to prevent them from directly writing to the physical memory.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2004-1193

Produtos afetados

Prevx Home

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/18195 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1193 · Nota de Segurança
• http://securitytracker.com/id?1012294 · Nota
• http://marc.info/?l=bugtraq&m=110118902823639&w=2 · Nota
• http://marc.info/?l=bugtraq&m=110138413816367&w=2 · Nota