CVE-2006-4184

SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists ACL in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information...

KLA10136 OSI vulnerability in DeviceLock

Improper ACL enforcing was found in DeviceLock. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited locally. Original advisories - Related products DeviceLock CVE list CVE-2006-4184 warning Solution Update to latest version Impact...

Unauthorized SmartLine DeviceLock disk access

In specific configuration local user can access content of any logical drive...

Local privilege Escalation in SmartLine DeviceLock 5.73

The vulnerability constitutes of wrong ACLs on Device Object permission set by the driver. Whenever your ACLs on a harddrive or partition, as configured by DeviceLock Manager, only consists of Allow entries and Deny being the default, then the driver sets the ACLs on the kernel's internal object...