Test ID:	1.3.6.1.4.1.25623.1.0.107327
Category:	Privilege escalation
Title:	Sophos SafeGuard Privilege Escalation Vulnerability - Windows
Summary:	Sophos SafeGuard Client Products are prone to privilege escalation vulnerabilities.
Description:	Summary: Sophos SafeGuard Client Products are prone to privilege escalation vulnerabilities. Vulnerability Insight: The vulnerabilities are present within all configurations of SafeGuard Enterprise (SGN), SafeGuard Easy (SGE) and SafeGuard LAN Crypt (SGLC) clients running on Windows. Exploitation of those vulnerabilities requires running malicious code on the target machine and can result in privilege escalation. This vulnerability is not remotely exploitable (i.e. over the network). Affected Software/OS: SafeGuard Enterprise Client 8.00.4 and earlier, SafeGuard Easy Client 7.00.2.35 and earlier, SafeGuard LAN Crypt Client 3.95.1.13 and earlier. Solution: Upgrade to SafeGuard Enterprise Client 8.00.5, SafeGuard Easy Client 7.00.3 or SafeGuard LAN Crypt Client 3.95.2. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-6851 http://seclists.org/fulldisclosure/2018/Jul/20 https://labs.nettitude.com/blog/cve-2018-6851-to-cve-2018-6857-sophos-privilege-escalation-vulnerabilities/ Common Vulnerability Exposure (CVE) ID: CVE-2018-6852 Common Vulnerability Exposure (CVE) ID: CVE-2018-6853 Common Vulnerability Exposure (CVE) ID: CVE-2018-6854 Common Vulnerability Exposure (CVE) ID: CVE-2018-6855 Common Vulnerability Exposure (CVE) ID: CVE-2018-6856 Common Vulnerability Exposure (CVE) ID: CVE-2018-6857
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.