PT-2006-2388 · Trend Micro · Trend Micro Pc-Cillin Internet Security

Published 2006-03-24 · Updated 2024-02-14 · CVE-2006-1379

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro PC-cillin Internet Security 2006 versions 14.00.1485 through 14.10.0.1023

Description The issue allows local users to gain SYSTEM privileges by modifying executable programs. This is due to the software using insecure DACLs for critical files. The affected executable programs include tmntsrv.exe and tmproxy.exe.

Recommendations For versions 14.00.1485 through 14.10.0.1023, consider restricting access to the executable programs tmntsrv.exe and tmproxy.exe to prevent modification and minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-1379

Affected Products

Trend Micro Pc-Cillin Internet Security

References · 5

• 🔥 http://secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english · Exploit
• 🔥 http://secunia.com/advisories/19282 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-1379 · Security Note
• http://vupen.com/english/advisories/2006/1042 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1379 · Note