CVE-2005-0352 - Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading

CVE-2005-0352

Summary

Servers Alive 4.1 and 5.0, when running as a service, does not drop SYSTEM privileges before loading local manual under the help menu, which allows local users to gain privileges.

References

http://marc.info/?l=bugtraq&m=111100364513513&w=2
http://secunia.com/advisories/14616/
http://www.securityfocus.com/bid/12822
https://exchange.xforce.ibmcloud.com/vulnerabilities/19715

Vulnerable Configurations

cpe:2.3:a:woodstone:servers_alive:4.1:*:*:*:*:*:*:*
cpe:2.3:a:woodstone:servers_alive:4.1:*:*:*:*:*:*:*
cpe:2.3:a:woodstone:servers_alive:5.0:*:*:*:*:*:*:*
cpe:2.3:a:woodstone:servers_alive:5.0:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 11-07-2017 - 01:32)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

refmap via4

bid	12822
bugtraq	20050316 Servers Alive: Local Privilege Escalation
secunia	14616
xf	serversalive-gain-privileges(19715)

Last major update

11-07-2017 - 01:32

Published

16-03-2005 - 05:00

Last modified

11-07-2017 - 01:32