CVE

Id
20569  
CVE No.
CVE-2006-4465  
Status
Candidate  
Description
** DISPUTED ** Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings from user profile and Client Connection Manager wizard" options, allows local users to execute arbitrary code by forcing an Explorer error. NOTE: a third-party researcher has stated that the options are "a convenience to users" and were not intended to restrict execution of arbitrary code.  
Phase
Assigned (20060831)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
193153 20569 CVE-2006-4465 BUGTRAQ:20060816 MS Terminal Server application session breakout  View
193154 20569 CVE-2006-4465 URL:http://www.securityfocus.com/archive/1/archive/1/443364/100/200/threaded  View
193155 20569 CVE-2006-4465 BUGTRAQ:20060816 Re: MS Terminal Server application session breakout  View
193156 20569 CVE-2006-4465 URL:http://www.securityfocus.com/archive/1/archive/1/443428/100/200/threaded  View
193157 20569 CVE-2006-4465 MISC:http://wklpc.blogspot.com/2006/08/easy-ms-terminal-server-desktop-hack.html  View
193158 20569 CVE-2006-4465 SREASON:1486  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60821 JVNDB-2006-003087 SMF における任意のローカルファイルを読むディレクトリトラバーサル攻撃を実行される脆弱性 Simple Machines Forum (SMF) は、英数字パラメータのハッシュの値と照合する値を伴う入力データが数値パラメータを含む際、変数を適切に設定解除しないため、任意のローカルファイルを読むディレクトリトラバーサル攻撃を実行される、トピックをロックされる、およびその他のセキュリティ影響を受ける脆弱性が存在します。 CVE-2006-4467 20569 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003087.html  View