CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2006-03-24

Last modified

2024-08-07

Affected products

• Officescan (Trend Micro)

References

• http://secunia.com/advisories/11576
• http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english
• http://www.vupen.com/english/advisories/2006/1041
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25415