CVE-2009-5150 - CVE House
Back to Database
Status published Medium CVE-2009-5150

Absolute Computrace Agent V80.845 and V80.866 does not have a...

Vulnerability Description

Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended search.namequery.com site by modifying data within a disk's inter-partition space. This allows a privileged local user to execute arbitrary code even after that user loses access and all disk partitions are reformatted.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-5150

Credits & Attribution

No credits recorded in the NVD database.

References

More from absolute

View All →
CVE-2018-16715
An issue was discovered in Absolute Software CTES Windows Agent...
High 8.8
CVE-2009-5152
Absolute Computrace Agent, as distributed on certain Dell Inspiron systems...
Medium 4.1
CVE-2009-5151
The stub component of Absolute Computrace Agent V70.785 executes code...
Medium 6.7

Affected Vendor

Affected Software

computrace agent
Vulnerable Versions:
80.845, 80.866

Timeline

Official Publish: May 11th, 2018
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.