Unscored severity · published Mar 24, 2006
CVE-2006-1380
ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files,…
–
CVSS
0.4%
EPSS
No
On KEV
Description
ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IM
Interscan Messaging Security Suite · Trendmicro
5.5 · source: NVD
Affected product
IM
Interscan Messaging Security Suite
Trendmicro
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1380
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1380
Patch
http://secunia.com/advisories/19022
URL Repurposed
http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english
www.vupen.com
http://www.vupen.com/english/advisories/2006/1041
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25415
More from Interscan Messaging Security Suite
–
CVE-2012-2996
Cross-site request forgery (CSRF) vulnerability in saveAccountSubTab.imss in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allows remote attackers to hijack…
–
CVE-2012-2995
Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro InterScan Messaging Security Suite 7.1-Build_Win32_1394 allow remote attackers to inject arbitrary web script or…