Local Privilege Escalation in Oray PeanutHull by Oray
CVE-2005-2382

Currently unrated

Key Information:

Vendor: Oray
Status: Peanuthull
Vendor: CVE Published:; 26 July 2005

What is CVE-2005-2382?

The Oray PeanutHull application, up to version 3.0.1.0, presents a security vulnerability wherein it fails to properly drop SYSTEM privileges when launched from the system tray. This oversight allows local users to exploit the Help functionality, gaining elevated privileges that could lead to unauthorized access to sensitive areas of the system. Users are advised to review their installation version and take necessary precautions.

References

http://secunia.com/advisories/16124

third-party-advisoryx_refsource_SECUNIA

http://www.securityfocus.com/bid/14330

vdb-entryx_refsource_BID

http://secway.org/advisory/AD20050720EN.txt

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 26, 2005
Vulnerability Reserved
Jul 26, 2005

CVE-2005-2382 Data

JSON