PT-2005-3794 · Unknown · Killprocess

Froggz · Published 2005-09-16 · Updated 2016-10-18 · CVE-2005-2948

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions KillProcess versions 2.20 and earlier

Description The issue allows local users to bypass kill list restrictions by launching multiple processes simultaneously, which are not all terminated by KillProcess.

Recommendations For KillProcess versions 2.20 and earlier, consider implementing a workaround to limit the launch of multiple processes at the same time until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-2948

Affected Products

Killprocess

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2005-2948 · Security Note
• http://marc.info/?l=bugtraq&m=112629480300071&w=2 · Note