Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

BulletProof FTP Server Local Privilege Escalation Vulnerability

No exploit is required. The following steps are available:
1. Right click the BulletProof FTP Server tray icon and click Show Server.
2. Click the Help icon.
3. Internet Explorer will open (running under the context of the
LocalSystem account). Click File, Click Open.
4. Click Browse.
5. Change Files of type: to All Files, navigate to the system32
directory and locate cmd.exe. Right click cmd.exe and choose Open.

Jerome Athias has provided exploit code for this vunerability.







 

Privacy Statement
Copyright 2008, SecurityFocus