Dell TrueMobile 1300 WLAN Mini-PCI Card Util TrayApplet 3.10.39.0 does not properly drop SYSTEM privileges when started from the systray applet, which allows local users to gain privileges by accessing the Help functionality.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Truemobile_1300_wlan_mini-pci_card_util_trayapplet | Dell | 3.10.39.0 (including) | 3.10.39.0 (including) |
References
- http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html
- http://secunia.com/advisories/10949
- http://securitytracker.com/id?1009174
- http://www.securityfocus.com/bid/9714
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15285
- http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0042.html
- http://secunia.com/advisories/10949
- http://securitytracker.com/id?1009174
- http://www.securityfocus.com/bid/9714
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15285