Lucene search
This script is Copyright (C) 2010-2024 and is owned by Tenable, Inc. or an Affiliate thereof.KASPERSKY_BASES_PERMS_PRIV_ESCALATION.NBINHistoryJan 06, 2010 - 12:00 a.m.
Kaspersky Multiple Products 'Bases' Directory Insecure Permissions
2010-01-0600:00:00
This script is Copyright (C) 2010-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
13
The version of either Kaspersky Anti-Virus or Kaspersky Internet Security installed on the remote host has a local privilege escalation vulnerability.
The Everyone group has Full Control rights to the ‘Bases’ directory.
This directory contains antivirus bases, configuration files, and executable modules used by multiple Kaspersky products.
A local attacker could exploit this to execute arbitrary code with SYSTEM privileges.
Binary data kaspersky_bases_perms_priv_escalation.nbin