iBackup 10.0.0.32 and earlier uses weak permissions (Everyone: Full Control) for ib_service.exe, which allows local users to gain privileges via a Trojan horse file.
References
Configurations
Information
Published : 2014-11-03 08:55
Updated : 2017-09-07 18:29
NVD link : CVE-2014-5507
Mitre link : CVE-2014-5507
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
pro_softnet_corporation
- ibackup