CVE Vulnerabilities

CVE-2006-0812

Published: Feb 23, 2006 | Modified: Nov 21, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.2 HIGH
AV:L/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

The VisNetic AntiVirus Plug-in (DKAVUpSch.exe) for Mail Server 4.6.0.4, 4.6.1.1, and possibly other versions before 4.6.1.2, does not drop privileges before executing other programs, which allows local users to gain privileges.

Affected Software

Name Vendor Start Version End Version
Visnetic_antivirus_plug-in_for_mail_server Visnetic 4.6.0.4 (including) 4.6.0.4 (including)
Visnetic_antivirus_plug-in_for_mail_server Visnetic 4.6.1.1 (including) 4.6.1.1 (including)

References