PT-2006-2390 · Trend Micro · Trend Micro Officescan

Published 2006-03-24 · Updated 2024-02-14 · CVE-2006-1381

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro OfficeScan versions prior to 6.5

Description The issue allows local users to gain SYSTEM privileges by modifying the tmlisten.exe file due to insecure DACLs used for critical files.

Recommendations For versions prior to 6.5, update to version 6.5 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-1381

Affected Products

Trend Micro Officescan

References · 6

• http://secunia.com/advisories/11576 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1381 · Security Note
• http://secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25415 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1381 · Note
• http://vupen.com/english/advisories/2006/1041 · Note