CVE-2006-4465

Currently unrated

Key Information:

Vendor
Microsoft
Status
Terminal Server
Vendor
CVE Published:
31 August 2006

Summary

Microsoft Terminal Server, when running an application session with the "Start program at logon" and "Override settings from user profile and Client Connection Manager wizard" options, allows local users to execute arbitrary code by forcing an Explorer error. NOTE: a third-party researcher has stated that the options are "a convenience to users" and were not intended to restrict execution of arbitrary code

References

http://wklpc.blogspot.com/2006/08/easy-ms-terminal-server...
x_refsource_MISC
http://www.securityfocus.com/archive/1/443428/100/200/thr...
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/archive/1/443364/100/200/thr...
mailing-listx_refsource_BUGTRAQ

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.