| Vulnerability Name: | CVE-2006-4927 (CCN-29360) | ||||||||
| Assigned: | 2006-10-05 | ||||||||
| Published: | 2006-10-05 | ||||||||
| Updated: | 2018-10-17 | ||||||||
| Summary: | The (a) NAVENG (NAVENG.SYS) and (b) NAVEX15 (NAVEX15.SYS) device drivers 20061.3.0.12 and later, as used in Symantec AntiVirus and security products, allow local users to gain privileges by overwriting critical system addresses using a crafted Irp to the IOCTL functions (1) 0x222AD3, (2) 0x222AD7, and (3) 0x222ADB. Update 20061.3.0.12 has been released by the vendor for each vulnerable driver. Additionally, an update to the virus definitions (October 4, 2006 revision 9 or later) is required. | ||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P) 3.4 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Thu Oct 05 2006 - 17:05:50 CDT [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation Source: MITRE Type: CNA CVE-2006-4927 Source: CCN Type: SA22288 Symantec Products IOCTL Handler Privilege Escalation Source: SECUNIA Type: Patch, Vendor Advisory 22288 Source: SREASON Type: UNKNOWN 1690 Source: CCN Type: SECTRACK ID: 1016994 Norton Anti-Virus NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1016994 Source: CCN Type: SECTRACK ID: 1016995 Norton Internet Security NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1016995 Source: CCN Type: SECTRACK ID: 1016996 Norton System Works NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1016996 Source: CCN Type: SECTRACK ID: 1016997 Symantec Anti Virus NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1016997 Source: CCN Type: SECTRACK ID: 1016998 Symantec Web Security NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1016998 Source: CCN Type: SECTRACK ID: 1016999 Symantec Scan Engine NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1016999 Source: CCN Type: SECTRACK ID: 1017000 Symantec Brightmail NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1017000 Source: CCN Type: SECTRACK ID: 1017001 Symantec Mail Security NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1017001 Source: CCN Type: SECTRACK ID: 1017002 Symantec Client Security NAVEX15/NAVENG Device Drivers Let Local Users Gain Kernel Level Privileges Source: SECTRACK Type: Exploit, Patch 1017002 Source: IDEFENSE Type: Patch, Vendor Advisory 20061005 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability Source: CCN Type: US-CERT VU#946820 Symantec products fail to properly limit device driver access to kernel memory Source: CERT-VN Type: US Government Resource VU#946820 Source: CCN Type: OSVDB ID: 29583 Symantec Multiple Products IOCTL Functions Crafted Irp Local Privilege Escalation Source: BUGTRAQ Type: UNKNOWN 20061005 [Reversemode Advisory] Symantec Antivirus Engine Privilege Escalation Source: BID Type: Exploit, Patch 20360 Source: CCN Type: BID-20360 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability Source: CCN Type: SYM06-020 Symantec Device Driver Elevation of Privilege Source: CONFIRM Type: Patch http://www.symantec.com/avcenter/security/Content/2006.10.05a.html Source: VUPEN Type: UNKNOWN ADV-2006-3928 Source: XF Type: UNKNOWN symantec-ioctl-privilege-escalation(29360) Source: XF Type: UNKNOWN symantec-ioctl-privilege-escalation(29360) Source: CCN Type: iDEFENSE ADVISORY: 10.05.06 Symantec AntiVirus IOCTL Kernel Privilege Escalation Vulnerability | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||