CVE-2013-3496

Published May 22, 2013

Last updated 11 years ago

Overview

Description: Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.
Source: cve@mitre.org
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.2
Impact score: 10
Exploitability score: 3.9
Vector string: AV:L/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-264

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:infotecs:vipnet_client:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2C006E7D-B643-4E7F-BAFA-D74CD561EE28",
            "versionEndIncluding": "3.2.10"
          },
          {
            "criteria": "cpe:2.3:a:infotecs:vipnet_coordinator:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A647AAFF-8B3F-4B55-8A1A-E1322614D2BE",
            "versionEndIncluding": "3.2.10"
          },
          {
            "criteria": "cpe:2.3:a:infotecs:vipnet_personal_firewall:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E3374283-8BC8-449D-A90D-43139C99FB31",
            "versionEndIncluding": "3.1"
          },
          {
            "criteria": "cpe:2.3:a:infotecs:vipnet_safedisk:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "83FD73F4-B5F3-4922-801E-FD0397E5C0E8",
            "versionEndIncluding": "4.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References