CVE-2013-3496 Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permis...
HighCVSS 7.2
EPSS 0.39%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| infotecs vipnet client | <= 3.2.10 | No fix listed |
| infotecs vipnet coordinator | <= 3.2.10 | No fix listed |
| infotecs vipnet personal firewall | <= 3.1 | No fix listed |
| infotecs vipnet safedisk | <= 4.1 | No fix listed |