medium4.9
CVE-2006-4184
SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls a…
Impact
SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Smartline | Devicelock | Versions 5.72, 5.73_build_288, 5.73_build_300, 5.73_build_303 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21494
- http://securityreason.com/securityalert/1392
- http://www.protect-me.com/dl/whatsnew.html
- http://www.securityfocus.com/archive/1/443193/100/0/threaded
- http://www.securityfocus.com/bid/19500
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28384
- http://secunia.com/advisories/21494
- http://securityreason.com/securityalert/1392
- http://www.protect-me.com/dl/whatsnew.html
- http://www.securityfocus.com/archive/1/443193/100/0/threaded
- http://www.securityfocus.com/bid/19500
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28384