NVD

Id
63100  
Name
CVE-2006-4465  
Description
** DISPUTED ** Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings from user profile and Client Connection Manager wizard" options, allows local users to execute arbitrary code by forcing an Explorer error. NOTE: a third-party researcher has stated that the options are "a convenience to users" and were not intended to restrict execution of arbitrary code.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-08-31  
Modified Date
2008-09-05  
Seq
2006-4465  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
328577 63100 CVE-2006-4465 1486  View
328578 63100 CVE-2006-4465 http://wklpc.blogspot.com/2006/08/easy-ms-terminal-server-desktop-hack.html  View
328579 63100 CVE-2006-4465 20060816 MS Terminal Server application session breakout  View
328580 63100 CVE-2006-4465 20060816 Re: MS Terminal Server application session breakout  View

Related JVN