Lucene search

[email protected]CVE-2004-2430

HistoryAug 18, 2005 - 4:00 a.m.

CVE-2004-2430

2005-08-1804:00:00

[email protected]

web.nvd.nist.gov

cve-2004-2430

trend officescan

privilege escalation

vulnerability

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.8%

JSON

Trend OfficeScan Corporate Edition 5.58 and possibly earler does not drop privileges when opening a help window from a virus detection pop-up window, which allows local users to gain SYSTEM privileges.

Affected configurations

NVD

Node

trend_microofficescanMatch3.0corporate

trend_microofficescanMatchcorporate_3.5

trend_microofficescanMatchcorporate_3.11

trend_microofficescanMatchcorporate_3.13

trend_microofficescanMatchcorporate_3.54

trend_microofficescanMatchcorporate_5.02

trend_microofficescanMatchcorporate_5.5

trend_microofficescanMatchcorporate_5.58

CPENameOperatorVersion
trend_micro:officescantrend micro officescaneq3.0
trend_micro:officescantrend micro officescaneqcorporate_3.5
trend_micro:officescantrend micro officescaneqcorporate_3.11
trend_micro:officescantrend micro officescaneqcorporate_3.13
trend_micro:officescantrend micro officescaneqcorporate_3.54
trend_micro:officescantrend micro officescaneqcorporate_5.02
trend_micro:officescantrend micro officescaneqcorporate_5.5
trend_micro:officescantrend micro officescaneqcorporate_5.58

CPE	Name	Operator	Version
trend_micro:officescan	trend micro officescan	eq	3.0
trend_micro:officescan	trend micro officescan	eq	corporate_3.5
trend_micro:officescan	trend micro officescan	eq	corporate_3.11
trend_micro:officescan	trend micro officescan	eq	corporate_3.13
trend_micro:officescan	trend micro officescan	eq	corporate_3.54
trend_micro:officescan	trend micro officescan	eq	corporate_5.02
trend_micro:officescan	trend micro officescan	eq	corporate_5.5
trend_micro:officescan	trend micro officescan	eq	corporate_5.58

References

archives.neohapsis.com/archives/bugtraq/2004-06/0117.html

secunia.com/advisories/11806

uk.trendmicro-europe.com/enterprise/support/knowledge_base_detail.php?solutionId=20118

www.osvdb.org/6840

www.securityfocus.com/bid/10503

exchange.xforce.ibmcloud.com/vulnerabilities/16375

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.8%

JSON

Related for CVE-2004-2430

nvd1 cvelist1