CVE-2014-7872 – Comodo GeekBuddy < 4.18.121 - Local Privilege Escalation

https://notcve.org/view.php?id=CVE-2014-7872

Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privileges by connecting to the server. Comodo GeekBuddy anterior a 4.18.121 no restringe el acceso al servidor VNC, lo que permite a usuarios locales ganar privilegios mediante la conexión al servidor. Comodo Internet Security installs GeekBuddy which installs a weakly secure exposed VNC server. • https://www.exploit-db.com/exploits/37065 http://packetstormsecurity.com/files/135841/Comodo-Internet-Security-VNC-Server-Exposure.html http://www.osvdb.org/122355 • CWE-264: Permissions, Privileges, and Access Controls •