Skip to content
OpenAdvisories
Unscored CVE-2010-1906 EUVD-2010-1925GHSA-vwjv-28f3-j79g

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictab…

Published May 11, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

tgsrv.exe in the Repair Service in Consona Dynamic Agent, Repair Manager, Subscriber Activation, and Subscriber Agent relies on a predictable timestamp field to validate input to the \\.\pipe\__RepairService_pipe__company named pipe, which allows remote authenticated users to execute arbitrary code by obtaining the current time from (1) tcpip.sys or (2) an SMB2 service.

References