PT-2006-6628 · Passgo Technologies · Passgo Sso Plus

Published 2006-11-26 · Updated 2018-10-17 · CVE-2006-5965

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PassGo SSO Plus versions 2.1.0.32 and earlier

Description The issue allows local users to gain privileges by modifying critical programs due to insecure permissions set for the PassGo Technologies directory, which has Everyone/Full Control settings.

Recommendations For PassGo SSO Plus versions 2.1.0.32 and earlier, consider changing the permissions of the PassGo Technologies directory to restrict access and prevent local users from modifying critical programs.

Fix

Related Identifiers

CVE-2006-5965

Affected Products

Passgo Sso Plus

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2006-5965 · Security Note
• http://secunia.com/secunia_research/2006-68/advisory · Vendor Advisory
• http://secunia.com/advisories/22301 · Vendor Advisory
• http://securityfocus.com/bid/21244 · Note
• http://securitytracker.com/id?1017272 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30475 · Note
• http://securityfocus.com/archive/1/452325/100/0/threaded · Note
• http://vupen.com/english/advisories/2006/4660 · Note