CVEvulnerability
CVE-2006-1380
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-03-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.
Affected configurations
• trendmicro interscan messaging security suite 5.5
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/19022 Patch, Vendor Advisory
- http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english URL Repurposed
- http://www.vupen.com/english/advisories/2006/1041 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25415 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/19022 Patch, Vendor Advisory
- http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english URL Repurposed
- http://www.vupen.com/english/advisories/2006/1041 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25415 exchange.xforce.ibmcloud.com