high7.2
CVE-2013-3496
Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk…
Impact
Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Infotecs | Vipnet Client | through 3.2.10 |
| Infotecs | Vipnet Coordinator | through 3.2.10 |
| Infotecs | Vipnet Personal Firewall | through 3.1 |
| Infotecs | Vipnet Safedisk | through 4.1 |