PT-2005-4160 · Trend Micro · Trend Micro Pc-Cillin Internet Security

Published 2005-12-14 · Updated 2011-03-08 · CVE-2005-3360

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro PC-Cillin Internet Security versions prior to 12.00 build 1244

Description The issue is related to the installation of the software, which uses insecure default ACLs. This allows local users to cause a denial of service by disabling the service and gain system privileges by modifying or moving critical program files.

Recommendations For versions prior to 12.00 build 1244, consider restricting access to critical program files to prevent modification or movement, and review the default ACLs to ensure they are secure.

Fix

Related Identifiers

CVE-2005-3360

Affected Products

Trend Micro Pc-Cillin Internet Security

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2005-3360 · Security Note
• http://idefense.com/application/poi/display?id=351&type=vulnerabilities · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3360 · Note
• http://securitytracker.com/id?1015357 · Note
• http://securityfocus.com/bid/15872 · Note
• http://secunia.com/advisories/18044 · Note
• http://vupen.com/english/advisories/2005/2906 · Note