CVE-2006-4184

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-17 · updated 2026-06-16

Description

SmartLine DeviceLock before 5.73 Build 305 does not properly enforce access control lists (ACL) in raw mode, which allows local users to bypass NTFS controls and obtain sensitive information.

Affected products

Smartline Devicelock: 5.72, 5.73_build_288, 5.73_build_300, 5.73_build_303

References

http://secunia.com/advisories/21494
http://securityreason.com/securityalert/1392
http://www.protect-me.com/dl/whatsnew.html
http://www.securityfocus.com/archive/1/443193/100/0/threaded
http://www.securityfocus.com/bid/19500
https://exchange.xforce.ibmcloud.com/vulnerabilities/28384
http://secunia.com/advisories/21494
http://securityreason.com/securityalert/1392
http://www.protect-me.com/dl/whatsnew.html
http://www.securityfocus.com/archive/1/443193/100/0/threaded
http://www.securityfocus.com/bid/19500
https://exchange.xforce.ibmcloud.com/vulnerabilities/28384

Get alerted when CVE-2006-4184 or the next vulnerability affects your stack