CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Permissions Privileges and Access Controls
Summary: isntsmtp directory in trend micro interscan messaging security suite (imss) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure dacls for critical files, which allows local users to gain system privileges by modifying isntsysmonitor.exe.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2006-03-24
Last Modified Date: 2017-07-20