Description
Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.
References
- imss-isntsmtp-directory-permissions(25415) vdb-entry
- http://www.secumind.net/content/french/modules/news/article.php?storyid=9&sel_lang=english
- ADV-2006-1041 vdb-entry
- 11576 third-party-advisory