Description
SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information.
References
- 20060813 Local privilege Escalation in SmartLine DeviceLock 5.73 mailing-list
- devicelock-acl-security-bypass(28384) vdb-entry
- 1392 third-party-advisory
- http://www.protect-me.com/dl/whatsnew.html
- 21494 third-party-advisory
- 19500 vdb-entry