SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Devicelock | Smartline | 5.72 (including) | 5.72 (including) |
| Devicelock | Smartline | 5.73_build_288 (including) | 5.73_build_288 (including) |
| Devicelock | Smartline | 5.73_build_300 (including) | 5.73_build_300 (including) |
| Devicelock | Smartline | 5.73_build_303 (including) | 5.73_build_303 (including) |
References
- http://secunia.com/advisories/21494
- http://securityreason.com/securityalert/1392
- http://www.protect-me.com/dl/whatsnew.html
- http://www.securityfocus.com/archive/1/443193/100/0/threaded
- http://www.securityfocus.com/bid/19500
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28384
- http://secunia.com/advisories/21494
- http://securityreason.com/securityalert/1392
- http://www.protect-me.com/dl/whatsnew.html
- http://www.securityfocus.com/archive/1/443193/100/0/threaded
- http://www.securityfocus.com/bid/19500
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28384