PT-2006-1994 · Eset · Eset Nod32 Antivirus

Publicado 2006-04-07 · Atualizado 2011-03-08 · CVE-2006-0951

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NOD32 version 2.5

Description The issue is related to the NOD32 GUI running with SYSTEM privileges when a scheduled on-demand scan is executed, allowing local users to execute arbitrary code. This can be exploited to invoke cmd.exe with SYSTEM privileges, potentially leading to a loss of integrity.

Recommendations For NOD32 version 2.5, consider restricting the privileges of the nod32.exe process when running scheduled scans to minimize the risk of exploitation. As a temporary workaround, consider disabling the scheduled on-demand scan feature until a fix is available.

Correção

Identificadores relacionados

CVE-2006-0951

Produtos afetados

Eset Nod32 Antivirus

Referências · 6

• http://vupen.com/english/advisories/2006/1242 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0951 · Nota de Segurança
• http://secunia.com/secunia_research/2006-17/advisory · Nota
• http://frsirt.com/english/advisories/2006/1242 · Nota
• http://osvdb.org/24394 · Nota
• http://secunia.com/advisories/19054 · Aviso do Fabricante