Microsoft Windows WebClient service buffer overflow

Buffer overflow on RPC based service allows code execution with LocalSystem privileges...

Symantec Antivirus / Symantec Client Security privilege escalation

With help subsystem it's possible to execute code with LocalSystem privileges...

NAePolicy.txt

Summary: Privilege escalation in Network Associates ePolicy Orchestrator Agent 3.5.0 patch 3 http://www.nai.com/ Details: The ePolicy Orchestrator Agent web server which runs on TCP port 8081 by default and serves the McAfee Agent Activity Log can be used to view files that exist on the same...

Nortel Contivity VPN Client privilege escalation

File open dialog exllows to execute file with LocalSystem privileges...

[Full-disclosure] Privilege escalation in Linksys WLAN Monitor v2.0.

Summary: Privilege escalation in Linksys WLAN Monitor v2.0 http://www.linksys.com/ Details: The Linksys WLAN Monitor service WLSVC that is used to configure settings for various Linksys wireless network cards runs under the context of the LocalSystem account. It is possible to manipulate the...

Linksys WLAN Monitor privilege escalation

It's possible to execute application with LocalSystem privileges from Help system...

ContivitySystem.txt

Summary: Privilege escalation in Nortel Contivity VPN Client V0501.030 http://www.nortel.com Details: The Contivity VPN Client is a Windows application that lets you define and store connection information for accessing your corporate network through a Contivity Secure IP Services Gateway. When t...

Privilege escalation in Nortel Contivity VPN Client V05_01.030

Summary: Privilege escalation in Nortel Contivity VPN Client V0501.030 http://www.nortel.com Details: The Contivity VPN Client is a Windows application that lets you define and store connection information for accessing your corporate network through a Contivity Secure IP Services Gateway. When t...

linksysWLAN20.txt

Summary: Privilege escalation in Linksys WLAN Monitor v2.0 http://www.linksys.com/ Details: The Linksys WLAN Monitor service WLSVC that is used to configure settings for various Linksys wireless network cards runs under the context of the LocalSystem account. It is possible to manipulate the...

[Full-disclosure] Privilege escalation and password protection bypass in Altiris Client Service for Windows (Version 6.0.88)

Summary: Privilege escalation and password protection bypass in Altiris Client Service for Windows Version 6.0.88 http://www.altiris.com/ Details: It is possible to manipulate the administrative interface of the Altiris Client Service for Windows and escalate privileges to that of the LocalSystem...

Altris deployment solution AClient privilege escalation

It's possible to launch executable with LocalSystem privileges...

Privilege escalation in BulletProof FTP Server v2.4.0.31

Summary: Privilege escalation in BulletProof FTP Server v2.4.0.31 http://www.bpftpserver.com/ Details: When the BPFTPServer service is installed and running as LocalSystem it is possible to manipulate the administrative interface and escalate privileges to that of the LocalSystem account...

BakBone NetVault 7.1 - Local Privilege Escalation

BakBone NetVault 7.1 - Local Privilege Escalation // ===== Start UnhideNetVaultServiceWindow.c ====== include include int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow...

BakBone NetVault 7.1 Local Privilege Escalation Exploit

Exploit for unknown platform in category local exploits ======================================================= BakBone NetVault 7.1 Local Privilege Escalation Exploit ======================================================= // ===== Start UnhideNetVaultServiceWindow.c ====== include include int...

BakBone NetVault 7.1 - Local Privilege Escalation

// ===== Start UnhideNetVaultServiceWindow.c ====== include include int main void HWND hWnd; char szWindowName = "C:\Program Files\BakBone Software\NetVault\bin\nvstatsmngr.exe"; printf "Finding window %s\n", szWindowName ; hWnd = FindWindow NULL, szWindowName ; if hWnd == NULL printf "ERROR!...

Servers Alive servers monitoring tool privilege escalation

With help subsystem it's possible to start application with LocalSystem privileges...

MDaemon privilege escalation

It's possible to run application with LocalSytem privileges...

Mailtraq privilege escalation

It's possible to execute external application with LocalSystem account...

CVE-2002-1230

CVE-2002-1230 affects Windows NT 4.0/Terminal Server Edition, Windows 2000, and Windows XP via NetDDE Agent exploiting a WM_TIMER handling flaw. An untrusted WM_TIMER sequence (after WM_COPYDATA) could trigger arbitrary code execution with LocalSystem privileges, as described in MS02-071. The vul...

[Full-Disclosure] formatstring bug in Compaq HTTP Servers

Hi there There is a formatstring bug in Compaq HTTP Servers. in !.DebugSearchPaths?Url= requests The HTTP server runs with LocalSystem account. Versions: All versions i have tested had this formatstring bug. To be shure that it wasn't allready fixed, i downloaded this new version.. Insight...