CVE-2006-1381

Publication date

2006-03-24 11:00:00

Family

mitre

State

PUBLISHED

Description

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.