CVE-2013-3496

Published: May 22, 2013Modified: Apr 29, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

Infotecs ViPNet Client 3.2.10 (15632) and earlier, ViPNet Coordinator 3.2.10 (15632) and earlier, ViPNet Personal Firewall 3.1 and earlier, and ViPNet SafeDisk 4.1 (0.5643) and earlier use weak permissions (Everyone: Full Control) for a folder under %PROGRAMFILES%\Infotecs, which allows local users to gain privileges via a Trojan horse (1) executable file or (2) DLL file.

Affected (4)

Products: Infotecs: Vipnet Client, Vipnet Coordinator, Vipnet Personal Firewall, Vipnet Safedisk

4 products

Vipnet Coordinator

Vipnet Personal Firewall

Vipnet Safedisk

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Infotecs Vipnet Client	Up to 3.2.10
Infotecs Vipnet Coordinator	Up to 3.2.10
Infotecs Vipnet Personal Firewall	Up to 3.1
Infotecs Vipnet Safedisk	Up to 4.1

Related CWEs

References (2)

http://archives.neohapsis.com/archives/bugtraq/2013-05/0072.html

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2013-05/0072.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.