Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation

To: "Michael Scheidell" <scheidell@xxxxxxxxxx>
Subject: Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
From: eugeny gladkih <john@xxxxxxxxx>
Date: Tue, 05 Dec 2006 22:16:45 +0300
Cc: "ss_team" <ssteam.pl@xxxxxxxxx>, <bugtraq@xxxxxxxxxxxxxxxxx>, <security@xxxxxxxxxxxx>
In-reply-to: <B3BCAF4246A8A84983A80DAB50FE72427DE3F5@xxxxxxxxxxxxxxxxxx> (Michael Scheidell's message of "Tue, 5 Dec 2006 07:40:59 -0500")
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <B3BCAF4246A8A84983A80DAB50FE72427DE3F5@xxxxxxxxxxxxxxxxxx>
User-agent: Gnus/5.110006 (No Gnus v0.6) Emacs/22.0.91

>>>>> "MS" == Michael Scheidell <scheidell@xxxxxxxxxx> writes:

 >> we've found local privilege escalation in Symantec LiveState agent.
 >> 
 >> PoC:
 >> 
 >> 1. kill shstart.exe process

 MS> Wouldn't you have to be administrator to kill shstart.exe?

LocalSystem account has more privilegies then administrator's one.

-- 
Yours sincerely, Eugeny.
Doctor Web, Ltd. http://www.drweb.com

Follow-Ups:
- Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  - From: Ansgar -59cobalt- Wiechers
- Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  - From: Steve Shockley

References:
- RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
  - From: Michael Scheidell

Prev by Date: DistrRTgen 1.0 launched!
Next by Date: [SECURITY] [DSA 1228-1] New elinks packages fix arbitrary shell command execution
Previous by thread: RE: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
Next by thread: Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
Index(es):
- Date
- Thread