DATEV Nutzungskontrolle Unauthorized Access Vulnerability

The following proof of concept has been provided:

It is possible to deactivate the NUKO with just importing 2 registry
keys:

[HKEY_LOCAL_MACHINE\SOFTWARE\DATEV]
"NukoInfo"=hex:00,00,00,00,00,00,00,00,e4,6c,d9,ce,f1,69,97,e7,61,eb,08,48,e7,71,65,9b

[HKEY_LOCAL_MACHINE\SOFTWARE\DATEVeG\Components\B0000046\Versions\1.0\NukoInfos]
"NukoInfo"=hex:00,00,00,00,00,00,00,00,e4,6c,d9,ce,f1,69,97,e7,61,eb,08,48,e7,71,65,9b


 

Privacy Statement
Copyright 2010, SecurityFocus