CVE

Id
22412  
CVE No.
CVE-2006-6308  
Status
Candidate  
Description
** DISPUTED ** Symantec LiveState 7.1 Agent for Windows allows local users to gain privileges by stopping the shstart.exe process and open "Web Self-Service" from the system tray icon, which will open a browser window running with elevated privileges. NOTE: several third-party researchers have noted that administrator privileges may be necessary to terminate shstart.exe. If this is the case, then no privilege escalation occurs, and this is not a vulnerability.  
Phase
Assigned (20061206)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
216707 22412 CVE-2006-6308 BUGTRAQ:20061204 Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation  View
216708 22412 CVE-2006-6308 URL:http://www.securityfocus.com/archive/1/archive/1/453481/100/0/threaded  View
216709 22412 CVE-2006-6308 BUGTRAQ:20061205 RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation  View
216710 22412 CVE-2006-6308 URL:http://www.securityfocus.com/archive/1/archive/1/453551/100/0/threaded  View
216711 22412 CVE-2006-6308 BUGTRAQ:20061205 Re: Symantec LiveState Agent for Windows vulnerabi  View
216712 22412 CVE-2006-6308 URL:http://www.securityfocus.com/archive/1/archive/1/453587/100/0/threaded  View
216713 22412 CVE-2006-6308 BUGTRAQ:20061205 Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation  View
216714 22412 CVE-2006-6308 URL:http://www.securityfocus.com/archive/1/archive/1/453569/100/0/threaded  View
216715 22412 CVE-2006-6308 BUGTRAQ:20061206 RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation  View
216716 22412 CVE-2006-6308 URL:http://www.securityfocus.com/archive/1/archive/1/453653/100/0/threaded  View
216717 22412 CVE-2006-6308 SECTRACK:1017332  View
216718 22412 CVE-2006-6308 URL:http://securitytracker.com/id?1017332  View
216719 22412 CVE-2006-6308 XF:symantec-shstart-privilege-escalation(30728)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60242 JVNDB-2006-002508 Microsoft Internet Explorer 6.0 SP1 におけるサービス運用妨害 (DoS) の脆弱性 Microsoft Internet Explorer 6.0 SP1 には、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2006-6310 22412 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002508.html  View