CVE-2004-1624 | BDVDB-2026-8428 Detail

Description#

Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe).

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://marc.info/?l=bugtraq&m=109846296406459&w=2
http://www.securityfocus.com/bid/11500
https://exchange.xforce.ibmcloud.com/vulnerabilities/17838
http://secunia.com/advisories/12962

Exploit#

No public exploit known

History#

Version 12005-02-20Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.