iPass Mobile Client Service Privilege Escalation

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class Metasploit3 'iPass Mobile Client Service Privilege Escalation', 'Description' = %q The named pipe, \IPEFSYSPCPIPE, can be accessed by normal users to interact with...

iPass Mobile Client 2.4.2.15122 Privilege Escalation

Mogwai Security Advisory MSA-2015-03 ---------------------------------------------------------------------- Title: iPass Mobile Client service local privilege escalation Product: iPass Mobile Client Affected versions: iPass Mobile Client 2.4.2.15122 Newer version might be also affected Impact:...

iPass Mobile Client 2.4.2.15122 Privilege Escalation Vulnerability

iPass Mobile Client version 2.4.2.15122 suffers from a local privilege escalation vulnerability. Title: iPass Mobile Client service local privilege escalation Product: iPass Mobile Client Affected versions: iPass Mobile Client 2.4.2.15122 Newer version might be also affected Impact: medium Remote...

iPass Mobile Client Service Privilege Escalation

The named pipe, \IPEFSYSPCPIPE, can be accessed by normal users to interact with the iPass service. The service provides a LaunchAppSysMode command which allows to execute arbitrary commands as SYSTEM. Module Options msf use exploit/windows/local/ipass/launchapp msf undefinedlaunchapp show action...