PT-2005-4803 · Sunncomm · Sunncomm Mediamax Drm

Alex Stamos + 1 · Published 2005-12-08 · Updated 2011-03-07 · CVE-2005-4069

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SunnComm MediaMax DRM version 5.0.21.0

Description The issue allows local users to gain privileges by modifying programs installed in the "SunnComm Shared" directory, due to insecure permissions. Specifically, the SunnComm MediaMax DRM assigns Everyone/Full Control permissions to this directory, which can be exploited by modifying installed programs such as MMX.exe.

Recommendations For SunnComm MediaMax DRM version 5.0.21.0, consider restricting access to the "SunnComm Shared" directory to prevent local users from modifying installed programs and gaining privileges. As a temporary workaround, restrict write access to the MMX.exe program to minimize the risk of exploitation.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2005-4069

Affected Products

Sunncomm Mediamax Drm

References · 8

• 🔥 http://eff.org/IP/DRM/Sony-BMG/MediaMaxVulnerabilityReport.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4069 · Security Note
• http://vupen.com/english/advisories/2005/2783 · Vendor Advisory
• http://secunia.com/advisories/17933 · Vendor Advisory
• http://securityfocus.com/bid/15754 · Note
• http://kb.cert.org/vuls/id/928689 · Note
• http://eff.org/news/archives/2005_12.php#004234 · Note
• http://securitytracker.com/id?1015327 · Note