CVE-2006-2154

HIGH 7.2CVE-2006-2154 · Published 03/05/2006 · updated 16/06/2026

In short

CVE-2006-2154 is a HIGH (CVSS 7.2) vulnerability affecting retrospect (emc).
Chance of exploitation in the next 30 days (EPSS): 0.39%, higher than 33.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
retrospect emc	`≤ 6.5≤ 7.0≤ 7.5`	No fix yet

Description

EMC Retrospect for Windows 6.5 before 6.5.382, 7.0 before 7.0.344, and 7.5 before 7.5.1.105 does not drop privileges before opening files, which allows local users to execute arbitrary code via the File>Open dialog.

References

kb.dantz.com/display/2n/articleDirect/index.asp
secunia.com/advisories/19850 · Vendor Advisory
securityfocus.com/bid/17798
vupen.com/english/advisories/2006/1612
exchange.xforce.ibmcloud.com/vulnerabilities/26226

More vulnerabilities in retrospect

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free