Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2006-1221

Overview

Vulnerability Score 6.2 6.2
CVE Id CVE-2006-1221
Last Modified 07 Mar 2011 09:32:28
Published 14 Mar 2006 06:02:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector LOCAL
Access Complexity HIGH
Authentication NONE

CVE-2006-1221

Summary

Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm's folder. NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE.

Vulnerable Systems

Application

  • Zonelabs Zonealarm Security Suite 6.1.744.000


References

VUPEN - ADV-2006-0947

BUGTRAQ - 20060309 Statement Regarding Reported Local Escalation of Privileges Vulnerability for ZoneAlarm

BUGTRAQ - 20060309 Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000

BUGTRAQ - 20060308 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000

SECTRACK - 1015743

MISC - http://reedarvin.thearvins.com/20060308-01.html

XF - zonealarm-path-gain-privileges(25097)

BID - 17037


Last Updated: 27 May 2016 10:41:58