Michael Scheidell
14/12/06, 10:42
> -----Original Message-----
> From: ss_team [mailto:ssteam.pl@gmail.com]=20
> Sent: Monday, December 04, 2006 11:28 AM
> To: bugtraq@securityfocus.com
> Subject: Symantec LiveState Agent for Windows vulnerability -=20
> Local Privilege Escalation
>=20
>=20
> hello,
>=20
> we've found local privilege escalation in Symantec LiveState agent.
>=20
> PoC:
>=20
> 1. kill shstart.exe process
Wouldn't you have to be administrator to kill shstart.exe?
> 2. from symantec livestate agent icon in systray choose "Web=20
> Self-Service"
> 3. New browser window will open, it is running with SYSTEM privileges.
>=20
> tested on fully patched Win XP SP2, Symantec LiveState agent 7.1
>=20
>=20
> Credits: marc & shb
>=20
>=20
> --=20
> http://ssteam.ath.cx
>=20
> From: ss_team [mailto:ssteam.pl@gmail.com]=20
> Sent: Monday, December 04, 2006 11:28 AM
> To: bugtraq@securityfocus.com
> Subject: Symantec LiveState Agent for Windows vulnerability -=20
> Local Privilege Escalation
>=20
>=20
> hello,
>=20
> we've found local privilege escalation in Symantec LiveState agent.
>=20
> PoC:
>=20
> 1. kill shstart.exe process
Wouldn't you have to be administrator to kill shstart.exe?
> 2. from symantec livestate agent icon in systray choose "Web=20
> Self-Service"
> 3. New browser window will open, it is running with SYSTEM privileges.
>=20
> tested on fully patched Win XP SP2, Symantec LiveState agent 7.1
>=20
>=20
> Credits: marc & shb
>=20
>=20
> --=20
> http://ssteam.ath.cx
>=20