CVE-2009-5150: High severity computrace vulnerability
Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended search.namequery.com site by modifying data within a disk's inter-partition space. This allows a privileged local user to execute arbitrary code even after that user loses access and all disk partitions are reformatted.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-5150?
CVE-2009-5150 has a moderate severity rating due to its potential to allow unauthorized communication and privilege escalation.
How do I fix CVE-2009-5150?
To fix CVE-2009-5150, update to the latest version of the Absolute Computrace Agent that includes a digital signature for the configuration block.
What software is affected by CVE-2009-5150?
CVE-2009-5150 affects Absolute Computrace Agent versions 80.845 and 80.866.
What type of attack is associated with CVE-2009-5150?
CVE-2009-5150 is associated with an authentication bypass attack that allows modification of communication settings.
Can CVE-2009-5150 lead to privilege escalation?
Yes, CVE-2009-5150 can lead to privilege escalation by enabling attackers to communicate with unintended websites.