PT-2005-4160 · Trend Micro · Trend Micro Pc-Cillin Internet Security

Publicado 2005-12-14 · Atualizado 2011-03-08 · CVE-2005-3360

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro PC-Cillin Internet Security versions prior to 12.00 build 1244

Description The issue is related to the installation of the software, which uses insecure default ACLs. This allows local users to cause a denial of service by disabling the service and gain system privileges by modifying or moving critical program files.

Recommendations For versions prior to 12.00 build 1244, consider restricting access to critical program files to prevent modification or movement, and review the default ACLs to ensure they are secure.

Correção

Identificadores relacionados

CVE-2005-3360

Produtos afetados

Trend Micro Pc-Cillin Internet Security

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3360 · Nota
• http://securitytracker.com/id?1015357 · Nota
• http://securityfocus.com/bid/15872 · Nota
• http://secunia.com/advisories/18044 · Nota
• http://vupen.com/english/advisories/2005/2906 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3360 · Nota de Segurança
• http://idefense.com/application/poi/display?id=351&type=vulnerabilities · Aviso do Fabricante