PC Tools AntiVirus Local Privilege Escalation Vulnerability

Bugtraq ID:	19322
Class:	Design Error
CVE:	CVE-2006-3114
Remote:	No
Local:	Yes
Published:	Aug 03 2006 12:00AM
Updated:	Aug 03 2006 08:51PM
Credit:	Carsten Eiram of Secunia Research discovered this issue.
Vulnerable:	PC Tools PC Tools AntiVirus 2.1 .51
Not Vulnerable:

PC Tools AntiVirus Local Privilege Escalation Vulnerability

PC Tools AntiVirus is prone to a local privilege-escalation vulnerability.

Reports indicate that the application fails to set secure default permissions on the 'PC Tools AntiVirus' directory.

An attacker may place and run executable files in the directory, leading to privilege escalation.
PC Tools AntiVirus 2.1.0.51 is reported vulnerable; other versions may be affected as well.

PC Tools AntiVirus Local Privilege Escalation Vulnerability

An exploit is not required to carry out this attack.

PC Tools AntiVirus Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

PC Tools AntiVirus Local Privilege Escalation Vulnerability

References:

• PC Tools AntiVirus Insecure Default Directory Permissions (Secunia)
  
• PC Tools AntiVirus Product Page (PC Tools)