CVE-2006-1380: High severity trendmicro interscan messaging security suite vulnerability

Published Mar 24, 2006

Updated

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.

Affected Software

1 affected component

trendmicro Interscan Messaging Security Suite=5.5

Remediation

Patch Available

http://secunia.com/advisories/19022

Event History

Mar 24, 2006

CVE Published

via NVD·11:02 AM

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2006-1380?

CVE-2006-1380 is rated as critical due to its potential to allow local users to gain SYSTEM privileges.

How do I fix CVE-2006-1380?

To fix CVE-2006-1380, update to Trend Micro InterScan Messaging Security Suite version 5.7.0.1121 or later.

Which versions of Trend Micro InterScan Messaging Security Suite are affected by CVE-2006-1380?

CVE-2006-1380 affects versions prior to 5.7.0.1121, specifically build 1183 and possibly earlier builds of version 5.5.

What is the impact of CVE-2006-1380?

The impact of CVE-2006-1380 is that local users can modify critical system files, potentially leading to unauthorized system access.

Is there a patch available for CVE-2006-1380?

Yes, a patch is available through the official update for Trend Micro InterScan Messaging Security Suite.