CVE-2018-6623

The CVE-2018-6623 entry concerns Hola VPN version 1.79.859. The issue arises from insecure service permissions (SERVICE_ALL_ACCESS) on the hola_svc and hola_updater Windows services, allowing an unprivileged user to modify or overwrite the executable. The modified executable would run on the next...

Hola VPN 1.79.859 - Insecure service permissions Vulnerability

Exploit for windows platform in category local exploits ===== Tempest Security Intelligence - ADV-22/2018 === Hola VPN 1.79.859 - Insecure service permissions ------------------------------------------------------- Author: - Filipe Xavier Oliveira: ===== Table of Contents...

Hola VPN 1.79.859 Insecure Service Permissions

===== Tempest Security Intelligence - ADV-22/2018 === Hola VPN 1.79.859 - Insecure service permissions ------------------------------------------------------- Author: - Filipe Xavier Oliveira: ===== Table of Contents ===================================================== Overview Detailed...