23 lines
No EOL
708 B
Text
23 lines
No EOL
708 B
Text
# Exploit Title: Viscosity for Windows 1.6.7 Privilege Escalation
|
|
# Date: 31.01.2017
|
|
# Software Link: https://www.sparklabs.com/
|
|
# Exploit Author: Kacper Szurek
|
|
# Contact: https://twitter.com/KacperSzurek
|
|
# Website: https://security.szurek.pl/
|
|
# Category: local
|
|
|
|
1. Description
|
|
|
|
It is possible to execute openvpn with custom dll as SYSTEM using ViscosityService because path is not correctly validated.
|
|
|
|
https://security.szurek.pl/viscosity-for-windows-167-privilege-escalation.html
|
|
|
|
2. Proof of Concept
|
|
|
|
https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/41207.zip
|
|
|
|
3. Solution
|
|
|
|
Update to version 1.6.8
|
|
|
|
https://www.sparklabs.com/blog/viscosity-for-mac-windows-version-1-6-8/ |