CVEvulnerability
CVE-2003-1169
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2003-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Description
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle.
Affected configurations
• datev nutzungskontrolle 2.1
• datev nutzungskontrolle 2.2
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013113.html Exploit, Patch
- http://www.securityfocus.com/bid/8950 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13589 exchange.xforce.ibmcloud.com
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-November/013113.html Exploit, Patch
- http://www.securityfocus.com/bid/8950 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/13589 exchange.xforce.ibmcloud.com