PT-2006-2388 · Trend Micro · Trend Micro Pc-Cillin Internet Security

CVE-2006-1379 · Publicado 2006-03-24 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro PC-cillin Internet Security 2006 versions 14.00.1485 through 14.10.0.1023

Description The issue allows local users to gain SYSTEM privileges by modifying executable programs. This is due to the software using insecure DACLs for critical files. The affected executable programs include tmntsrv.exe and tmproxy.exe.

Recommendations For versions 14.00.1485 through 14.10.0.1023, consider restricting access to the executable programs tmntsrv.exe and tmproxy.exe to prevent modification and minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-1379

Produtos afetados

Trend Micro Pc-Cillin Internet Security

Referências · 5

• 🔥 http://secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english · Exploit
• 🔥 http://secunia.com/advisories/19282 · Exploit
• http://vupen.com/english/advisories/2006/1042 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1379 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1379 · Nota