CVE-2006-1198

Published: Mar 14, 2006Modified: Apr 16, 2026

3.7

Vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 1.9 / Impact: 6.4

Source: NVD

Description

Comvigo IM Lock 2006 uses a simple substitution cipher to encrypt a password stored in the msnvs\prc registry value, for which all users have Read permission, which allows local users to bypass the product's blocking functionality by decrypting the password.

Affected (2)

Products: Comvigo: Im Lock

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Comvigo Im Lock	Version home_2006
Comvigo Im Lock	Version professional_2006

References (10)

http://secunia.com/advisories/19140

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/426935/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16988

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0866

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25219

Source: cve@mitre.org

http://secunia.com/advisories/19140

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/426935/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16988

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/0866

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25219

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.