Ahnlab V3 Antivirus Privilege Escalation Vulnerability
BID:14850
Info
Ahnlab V3 Antivirus Privilege Escalation Vulnerability
| Bugtraq ID: | 14850 |
| Class: | Origin Validation Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Sep 15 2005 12:00AM |
| Updated: | Sep 15 2005 12:00AM |
| Credit: | Discovery is credited to Tan Chew Keong, Secunia Research. |
| Vulnerable: |
Ahnlab V3Pro 2004 6.0 .0.383 Ahnlab V3Net for Windows Server 6.0 6.0 .0.383 Ahnlab V3 VirusBlock 2005 6.0 .0.383 |
| Not Vulnerable: | |
Discussion
Ahnlab V3 Antivirus Privilege Escalation Vulnerability
Ahnlab V3 Antivirus products are affected by a local privilege escalation vulnerability.
A successful attack can allow a local attacker to execute arbitrary applications with SYSTEM privileges. The attacker can also disable the scan engine, which can leave a computer vulnerable to malicious code attacks.
AhnLab V3Pro 2004 Build 6.0.0.383, AhnLab V3 VirusBlock 2005 Build 6.0.0.383, and AhnLab V3Net for Windows Server 6.0 Build 6.0.0.383 are reported to be vulnerable. Other versions may also be affected.
Ahnlab V3 Antivirus products are affected by a local privilege escalation vulnerability.
A successful attack can allow a local attacker to execute arbitrary applications with SYSTEM privileges. The attacker can also disable the scan engine, which can leave a computer vulnerable to malicious code attacks.
AhnLab V3Pro 2004 Build 6.0.0.383, AhnLab V3 VirusBlock 2005 Build 6.0.0.383, and AhnLab V3Net for Windows Server 6.0 Build 6.0.0.383 are reported to be vulnerable. Other versions may also be affected.
Exploit / POC
Ahnlab V3 Antivirus Privilege Escalation Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Ahnlab V3 Antivirus Privilege Escalation Vulnerability
Solution:
The vendor has released Build version 6.0.0.457 to address this issue. Users are advised to upgrade through the online update functionality of the application.
Solution:
The vendor has released Build version 6.0.0.457 to address this issue. Users are advised to upgrade through the online update functionality of the application.
References
Ahnlab V3 Antivirus Privilege Escalation Vulnerability
References:
References:
- Ahnlab Home Page (Ahnlab)
- Secunia Research: Ahnlab V3 Antivirus Multiple Vulnerabilities (Secunia Research