WinPcap NPF.SYS BIOCGSTATS Parameters Local Privilege Escalation Vulnerability
BID:24829
Info
WinPcap NPF.SYS BIOCGSTATS Parameters Local Privilege Escalation Vulnerability
| Bugtraq ID: | 24829 |
| Class: | Design Error |
| CVE: |
CVE-2007-3681 |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 09 2007 12:00AM |
| Updated: | Nov 01 2007 09:56PM |
| Credit: | Mario Ballano is credited with the discovery of this vulnerability. |
| Vulnerable: |
WinPcap WinPcap 4.0 WinPcap WinPcap 3.1 |
| Not Vulnerable: |
WinPcap WinPcap 4.0.1 |
Discussion
WinPcap NPF.SYS BIOCGSTATS Parameters Local Privilege Escalation Vulnerability
WinPcap is prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.
WinPcap 4.0 is vulnerable to this issue.
WinPcap is prone to a local privilege-escalation vulnerability.
An attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successfully exploiting this issue will result in the complete compromise of affected computers.
WinPcap 4.0 is vulnerable to this issue.
Exploit / POC
WinPcap NPF.SYS BIOCGSTATS Parameters Local Privilege Escalation Vulnerability
UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Exploit code is available to members of the Immunity Partner's program from the following location:
https://www.immunityinc.com/downloads/immpartners/winpcap.tgz
The following proof-of-concept example is available:
UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Exploit code is available to members of the Immunity Partner's program from the following location:
https://www.immunityinc.com/downloads/immpartners/winpcap.tgz
The following proof-of-concept example is available:
Solution / Fix
WinPcap NPF.SYS BIOCGSTATS Parameters Local Privilege Escalation Vulnerability
Solution:
The vendor has released WinPcap 4.0.1 to address this issue; please see the references for details.
WinPcap WinPcap 4.0
Solution:
The vendor has released WinPcap 4.0.1 to address this issue; please see the references for details.
WinPcap WinPcap 4.0
-
WinPcap WinPcap_4_0_1.exe
http://www.winpcap.org/install/bin/WinPcap_4_0_1.exe
References
WinPcap NPF.SYS BIOCGSTATS Parameters Local Privilege Escalation Vulnerability
References:
References: