EUVD-2006-0818

Malware in sbrugna...

Visnetic AntiVirus Plug-in for MailServer Local Privilege Escalation

The version of VisNetic AntiVirus Plug-in for MailServer installed on the remote host does not drop its privileges before invoking other programs. An attacker with local access can exploit this flaw to execute arbitrary programs on the affected host with LOCAL SYSTEM privileges. C Tenable Network...

Visnetic AntiVirus Plug-in for MailServer privilege escalation

External application choosen by user is invoked with Local System privileges...

Design/Logic Flaw

The VisNetic AntiVirus Plug-in DKAVUpSch.exe for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges...

CVE-2006-0812

The VisNetic AntiVirus Plug-in DKAVUpSch.exe for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges...

CVE-2006-0812

The CVE-2006-0812 vulnerability affects VisNetic AntiVirus Plug-in for MailServer (DKAVUpSch.exe) versions 4.6.0.4 and 4.6.1.1 (and possibly earlier than 4.6.1.2). The root cause is that the plug-in does not drop privileges before executing other programs, enabling a local attacker with access to...

CVE-2006-0812

The VisNetic AntiVirus Plug-in DKAVUpSch.exe for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges...