BugTraq
RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation Dec 05 2006 12:40PM
Michael Scheidell (scheidell secnap net) (1 replies)

> -----Original Message-----
> From: ss_team [mailto:ssteam.pl (at) gmail (dot) com [email concealed]]
> Sent: Monday, December 04, 2006 11:28 AM
> To: bugtraq (at) securityfocus (dot) com [email concealed]
> Subject: Symantec LiveState Agent for Windows vulnerability -
> Local Privilege Escalation
>
>
> hello,
>
> we've found local privilege escalation in Symantec LiveState agent.
>
> PoC:
>
> 1. kill shstart.exe process

Wouldn't you have to be administrator to kill shstart.exe?

> 2. from symantec livestate agent icon in systray choose "Web
> Self-Service"
> 3. New browser window will open, it is running with SYSTEM privileges.
>
> tested on fully patched Win XP SP2, Symantec LiveState agent 7.1
>
>
> Credits: marc & shb
>
>
> --
> http://ssteam.ath.cx
>

[ reply ]
Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation Dec 05 2006 07:16PM
eugeny gladkih (john drweb com) (2 replies)
Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation Dec 05 2006 07:55PM
Steve Shockley (steve shockley shockley net)
Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation Dec 05 2006 07:47PM
Ansgar -59cobalt- Wiechers (bugtraq planetcobalt net)


 

Privacy Statement
Copyright 2010, SecurityFocus