Lucene search
HistoryFeb 23, 2006 - 8:02 p.m.
CVE-2006-0812
cve-2006-0812
visnetic
antivirus
plug-in
dkavupsch.exe
mail server
security
privilege escalation
6.9 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
24.5%
The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges.
Related
securityvulns
securityvulns
prion
prion
Design/Logic Flaw
2006-02-23 20:02:00
nessus
nessus
Visnetic AntiVirus Plug-in for MailServer Local Privilege Escalation
2006-03-03 00:00:00
6.9 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
24.5%
Related for CVE-2006-0812