CVE-2009-5152

Absolute Computrace Agent, as distributed on certain Dell Inspiron systems through 2009, has a race condition with the Dell Client Configuration Utility (DCCU), which allows privileged local users to change Computrace Agent's activation/deactivation status to the factory default via a crafted TaskResult.xml file.

Score

CVSS 3.0 4.1 Medium

Status

Modified - cve@mitre.org

Published

2018-05-11

Last modified

2024-08-07

Weaknesses

CWE-362

Affected products

• Computrace Agent (Absolute)

References

• https://www.coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdf