How severe is CVE-2006-1381?

CVE-2006-1381 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2006-1381 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (73rd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2006-1381?

CVE-2006-1381 affects Trend Micro Officescan. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2006-1381?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2006-1381 published?

CVE-2006-1381 was published on 2006-03-24 and last updated on 2026-06-16.

CVE-2006-1381

CVE-2006-1381 is a critical-severity vulnerability in Trend Micro Officescan with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Critical (CVSS 2.0 base score 10.0)
EPSS exploit prediction: 2% (73rd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Trend Micro Officescan
Published: 2006-03-24
Last modified: 2026-06-16

Description

Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.

Frequently asked questions

What is CVE-2006-1381?: Trend Micro OfficeScan 5.5, and probably other versions before 6.5, uses insecure DACLs for critical files, which allows local users to gain SYSTEM privileges by modifying tmlisten.exe.
How severe is CVE-2006-1381?: CVE-2006-1381 has a CVSS 2.0 base score of 10.0, rated critical severity.
Is CVE-2006-1381 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (73rd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2006-1381?: CVE-2006-1381 affects Trend Micro Officescan. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2006-1381?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2006-1381 published?: CVE-2006-1381 was published on 2006-03-24 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:trend_micro:officescan:5.5:*:*:*:*:*:*:*

More vulnerabilities in Trend Micro Officescan

CVE-2008-3865 — Critical (CVSS 10.0): Multiple heap-based buffer overflows in the ApiThread function in the firewall service (aka TmPfw.exe) in Trend Micro…
CVE-2008-3862 — Critical (CVSS 10.0): Stack-based buffer overflow in CGI programs in the server in Trend Micro OfficeScan 7.3 Patch 4 build 1367 and other…
CVE-2008-4402 — Critical (CVSS 10.0): Multiple buffer overflows in CGI modules in the server in Trend Micro OfficeScan 8.0 SP1 before build 2439 and 8.0 SP1…
CVE-2008-2437 — Critical (CVSS 10.0): Stack-based buffer overflow in cgiRecvFile.exe in Trend Micro OfficeScan 7.3 patch 4 build 1362 and other builds,…
CVE-2007-3454 — Critical (CVSS 10.0): Stack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan Corporate Edition 8.0 allows…
CVE-2007-3455 — Critical (CVSS 10.0): cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass…

All CVEs affecting Trend Micro Officescan →