NVD

Id
59935  
Name
CVE-2006-1221  
Description
Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm"s own folders before other folders that are specified in a user"s PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm"s folder. NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE.  
Reject
 
CVSS Version
2  
CVSS Score
6.2  
Severity
Medium  
CVSS Base Score
6.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-03-14  
Modified Date
2011-03-07  
Seq
2006-1221  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
308404 59935 CVE-2006-1221 http://reedarvin.thearvins.com/20060308-01.html  View
308405 59935 CVE-2006-1221 1015743  View
308406 59935 CVE-2006-1221 20060308 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000  View
308407 59935 CVE-2006-1221 20060309 Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000  View
308408 59935 CVE-2006-1221 20060309 Statement Regarding Reported Local Escalation of Privileges Vulnerability for ZoneAlarm  View
308409 59935 CVE-2006-1221 17037  View
308410 59935 CVE-2006-1221 ADV-2006-0947  View
308411 59935 CVE-2006-1221 zonealarm-path-gain-privileges(25097)  View

Related JVN