Unscored severity · published Mar 24, 2006
CVE-2006-1381
Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Officescan · Trend Micro
5.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1381
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1381
Vendor Advisory
http://secunia.com/advisories/11576
URL Repurposed
http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english
www.vupen.com
http://www.vupen.com/english/advisories/2006/1041
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25415
More from Officescan
7.5
CVE-2019-18187
Trend Micro OfficeScan Directory Traversal Vulnerability
–
CVE-2008-3866
The Trend Micro Personal Firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet…
–
CVE-2008-3865
Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend…
–
CVE-2008-3864
The ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro Network Security Component (NSC) modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and…
–
CVE-2008-3862
Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other builds before 1374, and 8.0 SP1 Patch 1 before build 3110,…