VULNERABILITY INTELLIGENCE

CVE-2006-1380

CVSS score7.2 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2006-03-24
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

ISNTSmtp directory in Trend Micro InterScan Messaging Security Suite (IMSS) 5.5 build 1183 and possibly other versions before 5.7.0.1121, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying ISNTSysMonitor.exe.

Primary references