PT-2006-6628 · Passgo Technologies · Passgo Sso Plus

Publicado 2006-11-26 · Atualizado 2018-10-17 · CVE-2006-5965

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PassGo SSO Plus versions 2.1.0.32 and earlier

Description The issue allows local users to gain privileges by modifying critical programs due to insecure permissions set for the PassGo Technologies directory, which has Everyone/Full Control settings.

Recommendations For PassGo SSO Plus versions 2.1.0.32 and earlier, consider changing the permissions of the PassGo Technologies directory to restrict access and prevent local users from modifying critical programs.

Correção

Identificadores relacionados

CVE-2006-5965

Produtos afetados

Passgo Sso Plus

Referências · 8

• http://securityfocus.com/bid/21244 · Nota
• http://securitytracker.com/id?1017272 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5965 · Nota de Segurança
• http://secunia.com/secunia_research/2006-68/advisory · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30475 · Nota
• http://securityfocus.com/archive/1/452325/100/0/threaded · Nota
• http://secunia.com/advisories/22301 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/4660 · Nota