PC Tools AntiVirus Everyone组Full Control本地权限提升漏洞

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1193908 漏洞类型 设计错误
发布时间 2006-08-03 更新时间 2006-08-03
CVE编号 CVE-2006-3114 CNNVD-ID CNNVD-200608-102
漏洞平台 N/A CVSS评分 4.6
|漏洞来源
https://www.securityfocus.com/bid/19322
https://cxsecurity.com/issue/WLB-2006080049
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200608-102
|漏洞详情
PCToolsAntiVirus是一款功能强大的个人电脑杀毒软件。PCToolsAntiVirus对自身文件的保护上存漏洞,本地攻击者可能利用此漏洞提升自己的权限。PCToolsAntiVirus目录及其所有子对象没有设置安全的默认权限,给予了Everyone组FullControl权限,因此本地攻击者可能获得权限提升,以系统权限执行任意代码。
|漏洞EXP
======================================================================

Secunia Research 03/08/2006

- PC Tools AntiVirus Insecure Default Directory Permissions -

====================================================================== 
Table of Contents

Affected Software....................................................1
Severity.............................................................2
Vendor's Description of Software.....................................3
Description of Vulnerability.........................................4
Solution.............................................................5
Time Table...........................................................6
Credits..............................................................7
References...........................................................8
About Secunia........................................................9
Verification........................................................10

====================================================================== 
1) Affected Software

PC Tools AntiVirus 2.1.0.51.

Other versions may also be affected.

====================================================================== 
2) Severity

Rating: Less critical
Impact: Privilege Escalation
Where:  Local system

====================================================================== 
3) Vendor's Description of Software

"With PC Tools AntiVirus you are protected against the most nefarious
cyber-threats attempting to gain access to your PC and personal
information."

Product Link:
http://www.pctools.com/anti-virus/

====================================================================== 
4) Description of Vulnerability

Secunia Research has discovered a security issue in PC Tools AntiVirus,
which can be exploited by malicious, local users to gain escalated
privileges.

The problem is caused due to the application setting insecure default
permissions (grants "Everyone" group "Full Control") on the "PC Tools
AntiVirus" directory and all child objects. This can be exploited to
remove, manipulate, and replace any of the application's files.

Successful exploitation allows execution of arbitrary commands with 
SYSTEM privileges.

====================================================================== 
5) Solution

Grant only trusted users access to affected systems.

Set proper permissions on the directory and all child objects 
(this may impact the functionality).

====================================================================== 
6) Time Table

19/07/2006 - Vendor notified.
02/08/2006 - Vendor notified again.
03/08/2006 - Public disclosure.

====================================================================== 
7) Credits

Discovered by Carsten Eiram, Secunia Research.

====================================================================== 
8) References

The Common Vulnerabilities and Exposures (CVE) project has assigned 
CVE-2006-3114 for the vulnerabilities.

====================================================================== 
9) About Secunia

Secunia collects, validates, assesses, and writes advisories regarding 
all the latest software vulnerabilities disclosed to the public. These 
advisories are gathered in a publicly available database at the 
Secunia website:

http://secunia.com/

Secunia offers services to our customers enabling them to receive all 
relevant vulnerability information to their specific system 
configuration.

Secunia offers a FREE mailing list called Secunia Security Advisories:

http://secunia.com/secunia_security_advisories/

====================================================================== 
10) Verification

Please verify this advisory by visiting the Secunia website:
http://secunia.com/secunia_research/2006-51/

Complete list of vulnerability reports published by Secunia Research:
http://secunia.com/secunia_research/

======================================================================
|受影响的产品
PC Tools PC Tools AntiVirus 2.1 .51
|参考资料

来源:XF
名称:pctools-antivirus-directory-gain-privileges(28212)
链接:http://xforce.iss.net/xforce/xfdb/28212
来源:BID
名称:19322
链接:http://www.securityfocus.com/bid/19322
来源:BUGTRAQ
名称:20060803SecuniaResearch:PCToolsAntiVirusInsecureDefaultDirectoryPermissions
链接:http://www.securityfocus.com/archive/1/archive/1/442102/100/0/threaded
来源:VUPEN
名称:ADV-2006-3134
链接:http://www.frsirt.com/english/advisories/2006/3134
来源:SECTRACK
名称:1016634
链接:http://securitytracker.com/id?1016634
来源:MISC
链接:http://secunia.com/secunia_research/2006-51/advisory/
来源:SECUNIA
名称:21075
链接:http://secunia.com/advisories/21075
来源:SREASON
名称:1340
链接:http://securityreason.com/securityalert/1340