CVE-2006-1221
- State
- Published
- Severity
- Not scored
- Published
- Mar 14, 2006
- Updated
- Aug 7, 2024
- Reserved
- Mar 14, 2006
Description
Untrusted search path vulnerability in the TrueVector service (VSMON.exe) in Zone Labs ZoneAlarm 6.x and Integrity does not search ZoneAlarm's own folders before other folders that are specified in a user's PATH, which might allow local users to execute code as SYSTEM by placing malicious DLLs into a folder that has insecure permissions, but is searched before ZoneAlarm's folder. NOTE: since this issue is dependent on the existence of a vulnerability in a separate product (weak permissions of executables or libraries, or the execution of malicious code), perhaps it should not be included in CVE.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- zonealarm-path-gain-privileges(25097)vdb-entry
- http://reedarvin.thearvins.com/20060308-01.html
- 17037vdb-entry
- 1015743vdb-entry
- 20060309 Re: 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000mailing-list
- 20060309 Statement Regarding Reported Local Escalation of Privileges Vulnerability for ZoneAlarmmailing-list
- ADV-2006-0947vdb-entry
- 20060308 18 ways to escalate privileges in Zone Labs ZoneAlarm Security Suite build 6.1.744.000mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.