Home page logo
/

bugtraq logo Bugtraq mailing list archives

Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
From: ss_team <ssteam.pl () gmail com>
Date: Mon, 4 Dec 2006 17:28:05 +0100

hello,

we've found local privilege escalation in Symantec LiveState agent.

PoC:

1. kill shstart.exe process
2. from symantec livestate agent icon in systray choose "Web Self-Service"
3. New browser window will open, it is running with SYSTEM privileges.

tested on fully patched Win XP SP2, Symantec LiveState agent 7.1


Credits: marc & shb


--
http://ssteam.ath.cx


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault