CVEvulnerability
CVE-2006-2154
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-05-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the File>Open dialog.
Affected configurations
• emc retrospect (<= 6.5)
• emc retrospect (<= 7.0)
• emc retrospect (<= 7.5)
References
- http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324 kb.dantz.com
- http://secunia.com/advisories/19850 Vendor Advisory
- http://www.securityfocus.com/bid/17798 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1612 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26226 exchange.xforce.ibmcloud.com
- http://kb.dantz.com/display/2n/articleDirect/index.asp?aid=9507&r=0.7344324 kb.dantz.com
- http://secunia.com/advisories/19850 Vendor Advisory
- http://www.securityfocus.com/bid/17798 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/1612 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26226 exchange.xforce.ibmcloud.com