[CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities
Subject: [CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities
Date: Wed, 24 Jan 2007 18:39:27 -0500
Message-ID: <649CDCB56C88AA458EFF2CBF494B620402176F30@USILMS12.ca.com.>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: [CAID 34818]: CA Personal Firewall Multiple Privilege Escalation Vulnerabilities
Thread-Index: AcdAEOK2QhzlybxJTL2N5JE73GhsAA==
From: "Williams, James K" <James.Williams@ca.com.>
To: <bugtraq@securityfocus.com.>
X-OriginalArrivalTime: 24 Jan 2007 23:39:27.0906 (UTC) FILETIME=[E3376020:01C74010]
X-Virus-Scanned: antivirus-gw at tyumen.ru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