Previous articleBack to news listNext article
|
Sponsored links |
Want to become one of our authors and see your work published on ALLSeek.iNFO ?
|
| MDaemon System Tray Icon Lets Local Users Gain System Privileges |
|---|
Categorie: Vulnerability
Posted: 2004-12-02 by ReCall
Views: 341
Source: Click here
| Current Rating: Not rated
|
|
| Details |
|---|
Description: A vulnerability was reported in MDaemon. A local user can gain System level privileges.
Reed Arvin reported that a local user can exploit a flaw in the MDaemon system tray icon to execute arbitrary commands with System level privileges.
A local user can open the MDaemon system tray icon and click 'File, New' to open Notepad. Then, in Notepad, the user can click 'File, Open' and select 'cmd.exe' from the Windows System32 directory to open a command shell with System privileges.
The vendor was notified without response.
Impact: A local user can execute arbitrary commands and programs with system privileges.
Solution: No solution was available at the time of this entry.
|
| Syndication |
|---|
Permalink Email this
The URI to TrackBack this entry is:
http://allseek.info/news/trackback.php?id=1150
|
| User comments (post your comments ) |
|---|
Only registerd members can post comments and articles
|
|
Previous articleBack to news listNext article
|
