CVE-2006-1379
Severity Score
7.2
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as (1) tmntsrv.exe and (2) tmproxy.exe.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-03-24 CVE Reserved
- 2006-03-24 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.vupen.com/english/advisories/2006/1042 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/19282 | 2024-08-07 | |
| http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Trend Micro Search vendor "Trend Micro" | Pc-cillin 2006 Search vendor "Trend Micro" for product "Pc-cillin 2006" | <= 14.10.0.1023 Search vendor "Trend Micro" for product "Pc-cillin 2006" and version " <= 14.10.0.1023" | - |
Affected
| ||||||
| Trend Micro Search vendor "Trend Micro" | Pc-cillin 2006 Search vendor "Trend Micro" for product "Pc-cillin 2006" | 14.00.1485 Search vendor "Trend Micro" for product "Pc-cillin 2006" and version "14.00.1485" | - |
Affected
| ||||||