[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
- To: "Michael Scheidell" <scheidell@xxxxxxxxxx>
- Subject: Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
- From: eugeny gladkih <john@xxxxxxxxx>
- Date: Tue, 05 Dec 2006 22:16:45 +0300
>>>>> "MS" == Michael Scheidell <scheidell@xxxxxxxxxx> writes:
>> we've found local privilege escalation in Symantec LiveState agent.
>>
>> PoC:
>>
>> 1. kill shstart.exe process
MS> Wouldn't you have to be administrator to kill shstart.exe?
LocalSystem account has more privilegies then administrator's one.
--
Yours sincerely, Eugeny.
Doctor Web, Ltd. http://www.drweb.com