CVE-2005-2382: High severity Oray PeanutHull vulnerability

Published Jul 26, 2005

Updated

Oray PeanutHull 3.0.1.0 and earlier does not properly drop SYSTEM privileges when launched from the system tray, which allows local users to gain privileges by accessing the Help functionality.

Affected Software

1 affected component

Oray PeanutHull=3.0.1.0

Event History

Jul 26, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

A local user can exploit it. The attacker does not need prior authentication according to the provided vector, but must be able to interact with the affected system locally.

What user action or access path is involved?

The issue is triggered through the Help functionality when PeanutHull is launched from the system tray. Exploitation depends on the application retaining SYSTEM privileges in that launch context.

Which versions are affected?

Oray PeanutHull 3.0.1.0 and earlier are affected.

CVE-2005-2382: High severity Oray PeanutHull vulnerability

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What user action or access path is involved?

Which versions are affected?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What user action or access path is involved?

Which versions are affected?