Microsoft Security Bulletin MS06-011 Permissive Windows Services DACLs Could Allow Elevation of Privilege (914798)

Microsoft Security Bulletin MS06-011 Permissive Windows Services DACLs Could Allow Elevation of Privilege 914798 Published: March 14, 2006 | Updated: March 17, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Windows Impact of Vulnerability: Elevation of...

Code injection

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2006-1380

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...

CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

Design/Logic Flaw

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 versions 14.00.1485 through 14.10.0.1023 are affected by insecure DACLs on critical files, allowing local users to gain SYSTEM privileges by modifying executables (tmntsrv.exe and tmproxy.exe). Root cause: improper access control on key binaries. Impac...

CVE-2006-1380

The CVE-2006-1380 issue affects Trend Micro InterScan Messaging Security Suite (IMSS) prior to 5.7.0.1121. The ISNTSmtp directory uses insecure DACLs on critical files, enabling local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe. Affected versions include IMSS 5.5 build 1183 an...

CVE-2006-1381

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe...

CVE-2006-1379

Trend Micro PC-cillin Internet Security 2006 14.00.1485 and 14.10.0.1023, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying executable programs such as 1 tmntsrv.exe and 2 tmproxy.exe...

CVE-2006-1380

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite IMSS 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe...

CVE-2006-1381

Trend Micro OfficeScan 5.5 (and likely versions before 6.5) is affected by a privilege-escalation issue caused by insecure DACLs on critical files, enabling local users to gain SYSTEM privileges by modifying tmlisten.exe. The issue is documented across multiple sources (NVD, PT-2006-2390) with ex...