PT-2005-3794 · Unknown · Killprocess

Froggz · Publicado 2005-09-16 · Atualizado 2016-10-18 · CVE-2005-2948

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions KillProcess versions 2.20 and earlier

Description The issue allows local users to bypass kill list restrictions by launching multiple processes simultaneously, which are not all terminated by KillProcess.

Recommendations For KillProcess versions 2.20 and earlier, consider implementing a workaround to limit the launch of multiple processes at the same time until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-2948

Produtos afetados

Killprocess

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-2948 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112629480300071&w=2 · Nota