Roxio Toast TDIXSupport Local Privilege Escalation Vulnerability

Bugtraq ID:	11940
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Dec 15 2004 12:00AM
Updated:	Dec 15 2004 12:00AM
Credit:	Chris Holloway <[email protected]> and fintler <[email protected]> are credited with the discovery of this issue.
Vulnerable:	Roxio Toast 6.0 Titanium
Not Vulnerable:

Roxio Toast TDIXSupport Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability reportedly affects Roxio Toast. This issue is due to a design error in the application that allows an attacker to execute code with kernel privileges.

A local attacker may leverage this issue to execute arbitrary code on the affected computer with superuser privileges, facilitating privilege escalation.

Roxio Toast TDIXSupport Local Privilege Escalation Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Roxio Toast TDIXSupport Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Roxio Toast TDIXSupport Local Privilege Escalation Vulnerability

References:

• Toast Titanium Home Page (Roxio)