CVE-2006-4266
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local users to provide Trojan horse libraries to Norton by using RegSaveKey and RegRestoreKey to modify HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners, as demonstrated using NISProd.dll. NOTE: in most cases, this attack would not cross privilege boundaries, because modifying the SuiteOwners key requires administrative privileges. However, this issue is a vulnerability because the product's functionality is intended to protect against privileged actions such as this.
Symantec Norton Personal Firewall 2006 9.1.0.33, y posiblemente anteriores, no protege adecuadamente las claves de registro de Norton, lo cual permite a usuarios locales proporcionar librerías a modo de troyanos a Norton mediante el uso de RegSaveKey y RegRestoreKey para modificar HKLM\SOFTWARE\Symantec\CCPD\SuiteOwners, como ha sido demostrado usando NISProd.dll. NOTA: en la mayoría de los casos, este ataque no cruzaría los límites de privilegios, porque la modificación de la clave SuiteOwners requiere privilegios de administración. No obstante, este problema es una vulnerabilidad porque la funcionalidad del producto pretende proteger contra acciones con privilegios como esta.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2006-08-21 CVE Reserved
- 2006-08-21 CVE Published
- 2023-03-08 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://securityreason.com/securityalert/1428 | Third Party Advisory | |
| http://www.matousec.com/info/advisories/Norton-DLL-faking-via-SuiteOwners-protection-bypass.php | X_refsource_misc | |
| http://www.securityfocus.com/archive/1/443632/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/bid/19585 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Symantec Search vendor "Symantec" | Norton Personal Firewall Search vendor "Symantec" for product "Norton Personal Firewall" | <= 2006_9.1.0.33 Search vendor "Symantec" for product "Norton Personal Firewall" and version " <= 2006_9.1.0.33" | - |
Affected
| ||||||