Oray PeanutHull Local Privilege Escalation Vulnerability

Bugtraq ID:	14330
Class:	Design Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 20 2005 12:00AM
Updated:	Jul 20 2005 12:00AM
Credit:	Discovery is credited to Sowhat <[email protected]>.
Vulnerable:	Oray PeanutHull 3.0 Beta 5
Not Vulnerable:

Oray PeanutHull Local Privilege Escalation Vulnerability

PeanutHull is affected by a local privilege escalation vulnerability.

The application allows local users to launch arbitrary executables with SYSTEM privileges.

PeanutHull 3.0 Beta 5 and prior versions are vulnerable to this issue.

Oray PeanutHull Local Privilege Escalation Vulnerability

An exploit is not required.

Oray PeanutHull Local Privilege Escalation Vulnerability

Solution:
Reportedly, the vendor has addressed this issue in PeanutHull 3.0. This could not be confirmed by Symantec. Please contact the vendor for more information.

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Oray PeanutHull Local Privilege Escalation Vulnerability

References:

• Home Page (Oray)
  
• PeanutHull Local Privilege Escalation Vulnerability ("Sowhat ." )