CVE-2016-10072

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

CVE-2016-10072

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

CVE-2016-10031

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...

CVE-2016-10031

Summary (CVE-2016-10031) WampServer 3.0.6 is affected by weak file permissions in two services, wampapache and wampmysqld , which run with SYSTEM privileges. An authorized local user could replace the original executables (mysqld.exe or httpd.exe); on the next service start, the malicious file wo...

CVE-2016-10031

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...

CVE-2016-10072

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

CVE-2016-10072

WampServer 3.0.6 is affected by an arbitrary code execution vulnerability due to a weak Modify ACL on two files, wampmanager.exe and unins000.exe. A local, authorized but non-privileged user can replace these executable files, and when a more privileged user launches either program, malicious cod...

CVE-2016-10072

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

PT-2016-4559 · Wampserver · Wampserver

Name of the Vulnerable Software and Affected Versions: WampServer version 3.0.6 Description: The issue arises from weak file permissions in two services, 'wampapache' and 'wampmysqld', which run with SYSTEM privileges. This could allow a local, non-privileged user to execute arbitrary code with...

CVE-2016-10072: Improper Control of Generation of Code

WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit this vulnerability, the local...

CVE-2016-10031: Undefined Security Weakness

WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with weak file permissions, running with SYSTEM privileges. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with elevated privileges on the system. To properly exploit th...

PT-2016-4568 · Wampserver Team · Wampserver

Name of the Vulnerable Software and Affected Versions: WampServer version 3.0.6 Description: The issue concerns two files, wampmanager.exe and unins000.exe, which have a weak ACL for Modify. This could potentially allow an authorized but non-privileged local user to execute arbitrary code with...

Wampserver 3.0.6 Privilege Escalation

===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact: [email protected] CVE: 2016-10031...

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation

===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact: [email protected] =====================================================...

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation ===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact:...

Wampserver 3.0.6 - Insecure File Permissions Privilege Escalation Vulnerability

Exploit for windows platform in category local exploits ===================================================== Vendor Homepage: http://www.wampserver.com/ Date: 10 Dec 2016 Version : Wampserver 3.0.6 32 bit x86 Tested on: Windows 7 Ultimate SP1 EN Author: Heliand Dema Contact: email protected...

WampServer 3.0.6 - Insecure File Permissions Vulnerability

WampServer Formerly WAMP5 is a Web development platform WAMP type, for operating locally without connecting to an external server PHP scripts. WampServer is not in itself a software but an environment with two servers Apache and MySQL, a script interpreter PHP and phpMyAdmin for administration We...

WampServer 3.0.6 Insecure File Permissions

Document Title: =============== WampServer 3.0.6 - Insecure File Permissions Release Date: ============= 2016-09-23 Vulnerability Disclosure Timeline: ================================== 2016-09-30 : Public Disclosure Product & Service Introduction: =============================== WampServer...

WampServer v3.0.6 - Insecure File Permissions

Document Title: =============== WampServer v3.0.6 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1964 Release Date: ============= 2016-09-30 Vulnerability Laboratory ID VL-ID: ==================================== 1964 Common...

WampServer v3.0.6 - Insecure File Permissions

Document Title: =============== WampServer v3.0.6 - Insecure File Permissions References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=1964 Release Date: ============= 2016-09-29 Vulnerability Laboratory ID VL-ID: ==================================== 1964 Common...