medium4.6Public exploit code
CVE-2003-1169
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by import…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DATEV Nutzungskontrolle 2.1/2.2 - Unauthorized Access2003-11-01 · local · windows · Verified
Impact
DATEV Nutzungskontrolle 2.1 and 2.2 has insecure write permissions for critical registry keys, which allows local users to bypass access restrictions by importing NukoInfo values in certain DATEV keys, which disables Nutzungskontrolle.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Datev | Nutzungskontrolle | Versions 2.1, 2.2 |