Medium severity6.7NVD Advisory· Published May 11, 2018· Updated Jun 16, 2026
CVE-2009-5150
CVE-2009-5150
Description
Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended search.namequery.com site by modifying data within a disk's inter-partition space. This allows a privileged local user to execute arbitrary code even after that user loses access and all disk partitions are reformatted.
Affected products
3cpe:2.3:a:absolute:computrace_agent:80.845:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:absolute:computrace_agent:80.845:*:*:*:*:*:*:*
- cpe:2.3:a:absolute:computrace_agent:80.866:*:*:*:*:*:*:*
- (no CPE)range: V80.845, V80.866
Patches
Vulnerability mechanics
References
1- www.coresecurity.com/system/files/publications/2016/05/Paper-Deactivate-the-Rootkit-AOrtega-ASacco.pdfnvdExploitTechnical DescriptionThird Party Advisory
News mentions
0No linked articles in our index yet.