PT-2006-1994 · Eset · Eset Nod32 Antivirus

Published 2006-04-07 · Updated 2011-03-08 · CVE-2006-0951

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions NOD32 version 2.5

Description The issue is related to the NOD32 GUI running with SYSTEM privileges when a scheduled on-demand scan is executed, allowing local users to execute arbitrary code. This can be exploited to invoke cmd.exe with SYSTEM privileges, potentially leading to a loss of integrity.

Recommendations For NOD32 version 2.5, consider restricting the privileges of the nod32.exe process when running scheduled scans to minimize the risk of exploitation. As a temporary workaround, consider disabling the scheduled on-demand scan feature until a fix is available.

Fix

Related Identifiers

CVE-2006-0951

Affected Products

Eset Nod32 Antivirus

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2006-0951 · Security Note
• http://secunia.com/advisories/19054 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1242 · Note
• http://secunia.com/secunia_research/2006-17/advisory · Note
• http://frsirt.com/english/advisories/2006/1242 · Note
• http://osvdb.org/24394 · Note