PT-2006-5004 · Smartline · Smartline Devicelock

Seppi · Publicado 2006-08-17 · Atualizado 2018-10-17 · CVE-2006-4184

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Média

Vetor base

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions SmartLine DeviceLock versions prior to 5.73 Build 305

Description The issue concerns the improper enforcement of access control lists (ACL) in raw mode, allowing local users to bypass NTFS controls and obtain sensitive information.

Recommendations For versions prior to 5.73 Build 305, update to version 5.73 Build 305 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2006-4184

Produtos afetados

Smartline Devicelock

Referências · 7

• http://securityfocus.com/bid/19500 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2006-4184 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28384 · Nota
• http://secunia.com/advisories/21494 · Aviso do Fabricante
• http://protect-me.com/dl/whatsnew.html · Nota
• http://securityfocus.com/archive/1/443193/100/0/threaded · Nota
• http://securityreason.com/securityalert/1392 · Nota