NVD

Id
62905  
Name
CVE-2006-4266  
Description
Symantec Norton Personal Firewall 2006 9.1.0.33, and possibly earlier, does not properly protect Norton registry keys, which allows local users to provide Trojan horse libraries to Norton by using RegSaveKey and RegRestoreKey to modify HKLMSOFTWARESymantecCCPDSuiteOwners, as demonstrated using NISProd.dll. NOTE: in most cases, this attack would not cross privilege boundaries, because modifying the SuiteOwners key requires administrative privileges. However, this issue is a vulnerability because the product"s functionality is intended to protect against privileged actions such as this.  
Reject
 
CVSS Version
2  
CVSS Score
3.6  
Severity
Low  
CVSS Base Score
3.6  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-08-21  
Modified Date
2008-09-05  
Seq
2006-4266  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
327111 62905 CVE-2006-4266 1428  View
327112 62905 CVE-2006-4266 http://www.matousec.com/info/advisories/Norton-DLL-faking-via-SuiteOwners-protection-bypass.php  View
327113 62905 CVE-2006-4266 20060818 Norton DLL faking via "SuiteOwners" protection bypass Vulnerability  View
327114 62905 CVE-2006-4266 19585  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60788 JVNDB-2006-003054 Symantec Norton Personal Firewall におけるトロイの木馬ライプラリを追加される脆弱性 Symantec Norton Personal Firewall は、Norton レジストリキーを適切に保護しないため、Norton レジストリキーにトロイの木馬ライプラリを追加される脆弱性が存在します。 CVE-2006-4266 20368 CVE-2006-4266 62905 3.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003054.html 2006-08-21 2012-12-20 View