CVE

Id
17325  
CVE No.
CVE-2006-1221  
Status
Candidate  
Description
Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm"s own folders before other folders that are specified in a user"s PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm"s folder. NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE.  
Phase
Assigned (20060314)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
142809 17325 CVE-2006-1221 BUGTRAQ:20060308 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000  View
142810 17325 CVE-2006-1221 URL:http://www.securityfocus.com/archive/1/archive/1/427122/100/0/threaded  View
142811 17325 CVE-2006-1221 BUGTRAQ:20060309 Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000  View
142812 17325 CVE-2006-1221 URL:http://www.securityfocus.com/archive/1/archive/1/427145/100/0/threaded  View
142813 17325 CVE-2006-1221 MISC:http://reedarvin.thearvins.com/20060308-01.html  View
142814 17325 CVE-2006-1221 BUGTRAQ:20060309 Statement Regarding Reported Local Escalation of Privileges Vulnerability for ZoneAlarm  View
142815 17325 CVE-2006-1221 URL:http://www.securityfocus.com/archive/1/archive/1/427309/100/0/threaded  View
142816 17325 CVE-2006-1221 BID:17037  View
142817 17325 CVE-2006-1221 URL:http://www.securityfocus.com/bid/17037  View
142818 17325 CVE-2006-1221 VUPEN:ADV-2006-0947  View
142819 17325 CVE-2006-1221 URL:http://www.vupen.com/english/advisories/2006/0947  View
142820 17325 CVE-2006-1221 SECTRACK:1015743  View
142821 17325 CVE-2006-1221 URL:http://securitytracker.com/id?1015743  View
142822 17325 CVE-2006-1221 XF:zonealarm-path-gain-privileges(25097)  View

Related JVN