PT-2006-5004 · Smartline · Smartline Devicelock

Seppi · Published 2006-08-17 · Updated 2018-10-17 · CVE-2006-4184

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:L/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions SmartLine DeviceLock versions prior to 5.73 Build 305

Description The issue concerns the improper enforcement of access control lists (ACL) in raw mode, allowing local users to bypass NTFS controls and obtain sensitive information.

Recommendations For versions prior to 5.73 Build 305, update to version 5.73 Build 305 or later to resolve the issue.

Fix

Related Identifiers

CVE-2006-4184

Affected Products

Smartline Devicelock

References · 7

• http://securityfocus.com/bid/19500 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2006-4184 · Security Note
• http://secunia.com/advisories/21494 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28384 · Note
• http://protect-me.com/dl/whatsnew.html · Note
• http://securityfocus.com/archive/1/443193/100/0/threaded · Note
• http://securityreason.com/securityalert/1392 · Note