Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Carbon Copy 6.0.5257 does not drop system privileges when opening external programs through the help topic interface, which allows local users to gain privileges via (1) the help topic interface in CCW32.exe, which launches Notepad, or (2) the help button in the Carbon Copy Scheduler (CCSched.exe).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Altiris Carbon Copy远程控制系统本地特权提升漏洞
Vulnerability Description
Carbon Copy 6.0.5257版本在通过帮助主题界面开放外部程序时不降低系统特权，本地用户可以借助（1）CCW32.exe中开启Notepad的帮助主题界面，或者（2）Carbon Copy Scheduler (CCSched.exe)中的帮助按钮来提升特权。
CVSS Information
N/A
Vulnerability Type
N/A