CVE-2006-1380
First published: Fri Mar 24 2006(Updated: )
ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro InterScan Messaging Security Suite | =5.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-1380?
CVE-2006-1380 is rated as critical due to its potential to allow local users to gain SYSTEM privileges.
How do I fix CVE-2006-1380?
To fix CVE-2006-1380, update to Trend Micro InterScan Messaging Security Suite version 5.7.0.1121 or later.
Which versions of Trend Micro InterScan Messaging Security Suite are affected by CVE-2006-1380?
CVE-2006-1380 affects versions prior to 5.7.0.1121, specifically build 1183 and possibly earlier builds of version 5.5.
What is the impact of CVE-2006-1380?
The impact of CVE-2006-1380 is that local users can modify critical system files, potentially leading to unauthorized system access.
Is there a patch available for CVE-2006-1380?
Yes, a patch is available through the official update for Trend Micro InterScan Messaging Security Suite.
- agent/references
- agent/type
- agent/severity
- agent/softwarecombine
- agent/author
- agent/description
- agent/remedy
- agent/weakness
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/trendmicro
- product/interscan messaging security suite
- canonical/trendmicro interscan messaging security suite
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- canonical/trend micro interscan messaging security suite
- version/trend micro interscan messaging security suite/5.5