Sony SunnComm MediaMax Insecure Directory Permissions Vulnerability
BID:15754
Info
Sony SunnComm MediaMax Insecure Directory Permissions Vulnerability
| Bugtraq ID: | 15754 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Dec 07 2005 12:00AM |
| Updated: | Dec 07 2005 12:00AM |
| Credit: | Discovery is credited to Jesse Burns and Alex Stamos of Information Security Partners LLC. |
| Vulnerable: |
Sony SunnComm MediaMax 5.0.21 .0 |
| Not Vulnerable: | |
Discussion
Sony SunnComm MediaMax Insecure Directory Permissions Vulnerability
SunnComm MediaMax is prone to an insecure directory permissions vulnerability.
The vulnerability presents itself because the 'SunnComm Shared' directory allows 'Full Control' permissions to 'Everyone'.
This insecure access control list associated with the directory can permit unprivileged attackers to read, modify and delete contents in the directory. Local privilege escalation is also possible.
SunnComm MediaMax 5.0.21.0 is known to be vulnerable to this issue, however, other versions may be affected as well.
SunnComm MediaMax is prone to an insecure directory permissions vulnerability.
The vulnerability presents itself because the 'SunnComm Shared' directory allows 'Full Control' permissions to 'Everyone'.
This insecure access control list associated with the directory can permit unprivileged attackers to read, modify and delete contents in the directory. Local privilege escalation is also possible.
SunnComm MediaMax 5.0.21.0 is known to be vulnerable to this issue, however, other versions may be affected as well.
Exploit / POC
Sony SunnComm MediaMax Insecure Directory Permissions Vulnerability
An exploit is not required.
An exploit is not required.
Solution / Fix
Sony SunnComm MediaMax Insecure Directory Permissions Vulnerability
Solution:
Sony has released a patch to address this issue. It should be noted that manually changing permissions on the directory does not resolve this issue as the default permissions are restored by the application when a MediaMax protected CD is played.
Sony SunnComm MediaMax 5.0.21 .0
Solution:
Sony has released a patch to address this issue. It should be noted that manually changing permissions on the directory does not resolve this issue as the default permissions are restored by the application when a MediaMax protected CD is played.
Sony SunnComm MediaMax 5.0.21 .0
-
Sony MediaMax_5_0_45_Patch.exe
http://www.sunncomm.com/support/updates/updates.asp
References
Sony SunnComm MediaMax Insecure Directory Permissions Vulnerability
References:
References:
- Media Max Access Control Vulnerability (iSEC Partners)
- MediaMax (Sony)