CVE-2005-0352
Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges.
- Score
- CVSS 2.0 7.2 High
- Status
- Modified - cret@cert.org
- Published
- 2005-03-16
- Last modified
- 2024-08-07
Affected products
References
- http://marc.info/?l=bugtraq&m=111100364513513&w=2
- http://secunia.com/advisories/14616/
- http://www.securityfocus.com/bid/12822
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19715
