Lucene search
K

Bonjour Service 3,0,0,10 Unquoted Service Path

🗓️ 17 Jul 2024 00:00:00Reported by biosType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 362 Views

Bonjour Service Unquoted Service Path Vulnerabilit

Code
`# Exploit Title: Bonjour Service - 'mDNSResponder.exe' Unquoted Service Path  
# Discovery by: bios  
# Discovery Date: 2024-15-07  
# Vendor Homepage: https://developer.apple.com/bonjour/  
# Tested Version: 3,0,0,10  
# Vulnerability Type: Unquoted Service Path  
# Tested on OS: Microsoft Windows 10 Home  
  
# Step to discover Unquoted Service Path:  
  
C:\>wmic service get name,displayname,pathname,startmode |findstr /i "auto"  
|findstr /i /v "c:\windows\\" |findstr /i /v """  
Bonjour Service  
Bonjour Service  
C:\Program Files\Blizzard\Bonjour Service\mDNSResponder.exe  
Auto  
  
C:\>systeminfo  
  
Host Name: DESKTOP-HFBJOBG  
OS Name: Microsoft Windows 10 Home  
OS Version: 10.0.19045 N/A Build 19045  
  
PS C:\Program Files\Blizzard\Bonjour Service> powershell -command  
"(Get-Command .\mDNSResponder.exe).FileVersionInfo.FileVersion"  
>>  
3,0,0,10  
  
#Exploit:  
  
There is an Unquoted Service Path in Bonjour Services (mDNSResponder.exe) .  
This may allow an authorized local user to insert arbitrary code into the  
unquoted service path and escalate privileges.  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation