PT-2006-6125 · Passgo · Passgo Defender

Published 2006-10-19 · Updated 2017-07-20 · CVE-2006-5406

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Passgo Defender version 5.2

Description The issue allows local users to read and modify sensitive files due to the application directory being created with insecure permissions, specifically Everyone/Full Control.

Recommendations For Passgo Defender version 5.2, consider changing the permissions of the application directory to restrict access and prevent unauthorized modification of sensitive files. As a temporary workaround, restrict write access to the directory to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-5406

Affected Products

Passgo Defender

References · 6

• http://secunia.com/advisories/22271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5406 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29657 · Note
• http://osvdb.org/29789 · Note
• http://securityfocus.com/bid/20600 · Note
• http://vupen.com/english/advisories/2006/4091 · Note