Home page logo
/

bugtraq logo Bugtraq mailing list archives

RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
From: "Michael Scheidell" <scheidell () secnap net>
Date: Tue, 5 Dec 2006 07:40:59 -0500


-----Original Message-----
From: ss_team [mailto:ssteam.pl () gmail com] 
Sent: Monday, December 04, 2006 11:28 AM
To: bugtraq () securityfocus com
Subject: Symantec LiveState Agent for Windows vulnerability - 
Local Privilege Escalation


hello,

we've found local privilege escalation in Symantec LiveState agent.

PoC:

1. kill shstart.exe process

Wouldn't you have to be administrator to kill shstart.exe?


2. from symantec livestate agent icon in systray choose "Web 
Self-Service"
3. New browser window will open, it is running with SYSTEM privileges.

tested on fully patched Win XP SP2, Symantec LiveState agent 7.1


Credits: marc & shb


-- 
http://ssteam.ath.cx



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]