PT-2006-5076 · Symantec · Symantec Norton Personal Firewall
David Matousek
·
Publicado
2006-08-21
·
Atualizado
2018-10-17
·
CVE-2006-4266
CVSS v2.0
3.6
Baixa
| Vetor | AV:L/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Symantec Norton Personal Firewall 2006 version 9.1.0.33 and possibly earlier
Description
The issue allows local users to provide Trojan horse libraries by modifying the HKLMSOFTWARESymantecCCPDSuiteOwners registry key using RegSaveKey and RegRestoreKey, as demonstrated with NISProd.dll. This attack typically requires administrative privileges and does not cross privilege boundaries. However, it is considered a vulnerability because the product is intended to protect against such privileged actions.
Recommendations
For Symantec Norton Personal Firewall 2006 version 9.1.0.33 and possibly earlier, consider restricting access to the HKLMSOFTWARESymantecCCPDSuiteOwners registry key to prevent unauthorized modifications. Additionally, as a temporary workaround, consider disabling the use of RegSaveKey and RegRestoreKey functions to modify this key until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Symantec Norton Personal Firewall